3d149fa4823d27abdb00660339c55d02efa8a250ddef523a875b9fb6237364ea | Triage

Sharing

General

Target

2024-09-05_7a6f90d5b2216e8b576f7a50036ea2ec_cryptolocker
Size

38KB
Sample

240905-pbrchs1dqe
MD5

7a6f90d5b2216e8b576f7a50036ea2ec
SHA1

8bff2dd49aa6f913084fdc27ee1410b313b31205
SHA256

3d149fa4823d27abdb00660339c55d02efa8a250ddef523a875b9fb6237364ea
SHA512

724e6580de6f9a213de0e8cb839b371979de8291dd4d5760a0d66158fd01c2b5247efebc08c210c4a4763a2b2f6ebeca55d646d57c585cd06f4cc7271949d1aa
SSDEEP

768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4j:fT+hsMQMOtEvwDpjoIHj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_7a6f90d5b2216e8b576f7a50036ea2ec_cryptolocker
- Size
  
  38KB
- MD5
  
  7a6f90d5b2216e8b576f7a50036ea2ec
- SHA1
  
  8bff2dd49aa6f913084fdc27ee1410b313b31205
- SHA256
  
  3d149fa4823d27abdb00660339c55d02efa8a250ddef523a875b9fb6237364ea
- SHA512
  
  724e6580de6f9a213de0e8cb839b371979de8291dd4d5760a0d66158fd01c2b5247efebc08c210c4a4763a2b2f6ebeca55d646d57c585cd06f4cc7271949d1aa
- SSDEEP
  
  768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4j:fT+hsMQMOtEvwDpjoIHj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2