eed1bb0a54c3db16e760eb2061c5c76afae7c682f8867e94841ddf6cece0d7b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-03_f734d96e4b5d7475136c8433de94c8bd_cryptolocker
Size

92KB
Sample

240903-ptwpyswhlk
MD5

f734d96e4b5d7475136c8433de94c8bd
SHA1

3eb3bd3eb2037726229765ceb413ee73aa6823d8
SHA256

eed1bb0a54c3db16e760eb2061c5c76afae7c682f8867e94841ddf6cece0d7b4
SHA512

938d703b3215677cb5f3995e8d3fd6b171dffb96a039730cef1f4689de9249c6705f308a7ff173eb80479b08c1dc90b36acf81998886cbee3863ddaf10742e1b
SSDEEP

1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQoO8:vCjsIOtEvwDpj5H8zPs8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-03_f734d96e4b5d7475136c8433de94c8bd_cryptolocker
- Size
  
  92KB
- MD5
  
  f734d96e4b5d7475136c8433de94c8bd
- SHA1
  
  3eb3bd3eb2037726229765ceb413ee73aa6823d8
- SHA256
  
  eed1bb0a54c3db16e760eb2061c5c76afae7c682f8867e94841ddf6cece0d7b4
- SHA512
  
  938d703b3215677cb5f3995e8d3fd6b171dffb96a039730cef1f4689de9249c6705f308a7ff173eb80479b08c1dc90b36acf81998886cbee3863ddaf10742e1b
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQoO8:vCjsIOtEvwDpj5H8zPs8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2