2d20f93c2bb2583ed486540d6e1c4c496afef106765d4b406b32d94890228987 | Triage

Sharing

General

Target

2024-09-05_9a3e2699ef0a1dffdc5016457088c7f2_cryptolocker
Size

47KB
Sample

240905-mzzbxsygjl
MD5

9a3e2699ef0a1dffdc5016457088c7f2
SHA1

ebca6273c81887321692d5fcd17719bb54858a7f
SHA256

2d20f93c2bb2583ed486540d6e1c4c496afef106765d4b406b32d94890228987
SHA512

79b76140470769ba1865d52f3288c50fd4abe5b7c2d402740394e7aa99a3466f9a841fb1fb7a485fd390ca9dedc8486a7ef552dca381180380d298255aaebef2
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsi3:V6QFElP6n+gMQMOtEvwDpjyaYaFAh393

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_9a3e2699ef0a1dffdc5016457088c7f2_cryptolocker
- Size
  
  47KB
- MD5
  
  9a3e2699ef0a1dffdc5016457088c7f2
- SHA1
  
  ebca6273c81887321692d5fcd17719bb54858a7f
- SHA256
  
  2d20f93c2bb2583ed486540d6e1c4c496afef106765d4b406b32d94890228987
- SHA512
  
  79b76140470769ba1865d52f3288c50fd4abe5b7c2d402740394e7aa99a3466f9a841fb1fb7a485fd390ca9dedc8486a7ef552dca381180380d298255aaebef2
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsi3:V6QFElP6n+gMQMOtEvwDpjyaYaFAh393
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2