70b0982875b2da17c1c2f13373351c56408e915dfaa1810242f910379d4cd287 | Triage

Sharing

General

Target

2024-09-03_708752b88e06aa776484637f7244a0ae_cryptolocker
Size

46KB
Sample

240903-pny8wswfpn
MD5

708752b88e06aa776484637f7244a0ae
SHA1

bcb37147ec0908f135a944267423440b21dce204
SHA256

70b0982875b2da17c1c2f13373351c56408e915dfaa1810242f910379d4cd287
SHA512

d942bdb815f7346ffed84dfcbb5ff04128f3028ecc91b2495c877014aab2284983a87570c476dacfa85e8f569e24cb6b9728b26277d13212bb7c39ade0fc9ecb
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3t:bm74zYcgT/EkM0ryfjd3t

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-03_708752b88e06aa776484637f7244a0ae_cryptolocker
- Size
  
  46KB
- MD5
  
  708752b88e06aa776484637f7244a0ae
- SHA1
  
  bcb37147ec0908f135a944267423440b21dce204
- SHA256
  
  70b0982875b2da17c1c2f13373351c56408e915dfaa1810242f910379d4cd287
- SHA512
  
  d942bdb815f7346ffed84dfcbb5ff04128f3028ecc91b2495c877014aab2284983a87570c476dacfa85e8f569e24cb6b9728b26277d13212bb7c39ade0fc9ecb
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3t:bm74zYcgT/EkM0ryfjd3t
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2