aca3ea6c430f5eac5eb6b5a755dd93300b4ed261bfc0ea5fc7e5987da6f5e8fb | Triage

Sharing

General

Target

2024-09-05_7c4800416c7abd4074f5e87bbeab6f96_cryptolocker
Size

41KB
Sample

240905-pby3cszgmp
MD5

7c4800416c7abd4074f5e87bbeab6f96
SHA1

d3bb47dc50d32ebda76987c3beacb6a6df1107bb
SHA256

aca3ea6c430f5eac5eb6b5a755dd93300b4ed261bfc0ea5fc7e5987da6f5e8fb
SHA512

09faa48158c1df06b6f71eb697fc82497a2aa00b22dd35e0ea50be472b264999bf1c870eba1856ab80605cc7459ed53e4cd036e2e07b5720470fe1e5f89042c2
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axRVZHw:V6QFElP6n+gMQMOtEvwDpjyaYaLQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_7c4800416c7abd4074f5e87bbeab6f96_cryptolocker
- Size
  
  41KB
- MD5
  
  7c4800416c7abd4074f5e87bbeab6f96
- SHA1
  
  d3bb47dc50d32ebda76987c3beacb6a6df1107bb
- SHA256
  
  aca3ea6c430f5eac5eb6b5a755dd93300b4ed261bfc0ea5fc7e5987da6f5e8fb
- SHA512
  
  09faa48158c1df06b6f71eb697fc82497a2aa00b22dd35e0ea50be472b264999bf1c870eba1856ab80605cc7459ed53e4cd036e2e07b5720470fe1e5f89042c2
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axRVZHw:V6QFElP6n+gMQMOtEvwDpjyaYaLQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2