3cde397afb4cc95f24d94ccebe8db9cdaccbbfd212d888dec48921cbc9b397c7 | Triage

Sharing

General

Target

2024-09-05_c162223bb7f521b645a8dc1c3176fb55_cryptolocker
Size

63KB
Sample

240905-petbaazhlq
MD5

c162223bb7f521b645a8dc1c3176fb55
SHA1

17b8f63bc128a0b1509bb5a8f53fed6a3d3e5036
SHA256

3cde397afb4cc95f24d94ccebe8db9cdaccbbfd212d888dec48921cbc9b397c7
SHA512

ae7f0ac3756bb9c482035f1b337930755f3353f61b760d27738a5d708cc7f3f99b46110faa170ce1e1e638446e2faf3adff82a0ae09270f4f47872b15162e973
SSDEEP

1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNuS0:TCjsIOtEvwDpj5HE/OUHnSMZT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_c162223bb7f521b645a8dc1c3176fb55_cryptolocker
- Size
  
  63KB
- MD5
  
  c162223bb7f521b645a8dc1c3176fb55
- SHA1
  
  17b8f63bc128a0b1509bb5a8f53fed6a3d3e5036
- SHA256
  
  3cde397afb4cc95f24d94ccebe8db9cdaccbbfd212d888dec48921cbc9b397c7
- SHA512
  
  ae7f0ac3756bb9c482035f1b337930755f3353f61b760d27738a5d708cc7f3f99b46110faa170ce1e1e638446e2faf3adff82a0ae09270f4f47872b15162e973
- SSDEEP
  
  1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMNuS0:TCjsIOtEvwDpj5HE/OUHnSMZT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2