396968fa258395e674092ecaa41b1fd0e3358e3acb26c35fa4525d7cb6d46096 | Triage

Sharing

General

Target

2024-09-04_1fce33c15d15e7acafccfc088ca39e0c_cryptolocker
Size

46KB
Sample

240904-qmbxmssbma
MD5

1fce33c15d15e7acafccfc088ca39e0c
SHA1

e554ac7cb9eaedbada727bc99d2214e192f9e93a
SHA256

396968fa258395e674092ecaa41b1fd0e3358e3acb26c35fa4525d7cb6d46096
SHA512

01d6b0a8693b13af1b43511fe7e53725d9f26a1c8a1524457f18fdd3153c6c269c45d9080c24a2f3cb631677ee9ee51107c70b34180e256c05c362c0fbf398c8
SSDEEP

768:bao/2n1TCraU6GD1a4X1XOQ69zbjlAAX5e9zu:bF/y2lFizbR9Xwzu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-04_1fce33c15d15e7acafccfc088ca39e0c_cryptolocker
- Size
  
  46KB
- MD5
  
  1fce33c15d15e7acafccfc088ca39e0c
- SHA1
  
  e554ac7cb9eaedbada727bc99d2214e192f9e93a
- SHA256
  
  396968fa258395e674092ecaa41b1fd0e3358e3acb26c35fa4525d7cb6d46096
- SHA512
  
  01d6b0a8693b13af1b43511fe7e53725d9f26a1c8a1524457f18fdd3153c6c269c45d9080c24a2f3cb631677ee9ee51107c70b34180e256c05c362c0fbf398c8
- SSDEEP
  
  768:bao/2n1TCraU6GD1a4X1XOQ69zbjlAAX5e9zu:bF/y2lFizbR9Xwzu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2