03f2412e271910165ca33ad80a32affb61d319f017fd86a23b500b166d51e7c9 | Triage

Sharing

General

Target

2024-09-05_621445eb31c3494a8567c7aaaf083e79_cryptolocker
Size

44KB
Sample

240905-t1ykcavhqa
MD5

621445eb31c3494a8567c7aaaf083e79
SHA1

7982331ccc9ecd26b6adb9d179450a97082818ec
SHA256

03f2412e271910165ca33ad80a32affb61d319f017fd86a23b500b166d51e7c9
SHA512

7ee29fb9088204b12e1379e2c21f638a399f61cdfac5828bb252e3b7bd9574f9c46cc76f5075c01b4ab2a49782df8f36171b277ffb25a954485b0817755d520a
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0LHx:bCDOw9aMDooc+vAlXx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-05_621445eb31c3494a8567c7aaaf083e79_cryptolocker
- Size
  
  44KB
- MD5
  
  621445eb31c3494a8567c7aaaf083e79
- SHA1
  
  7982331ccc9ecd26b6adb9d179450a97082818ec
- SHA256
  
  03f2412e271910165ca33ad80a32affb61d319f017fd86a23b500b166d51e7c9
- SHA512
  
  7ee29fb9088204b12e1379e2c21f638a399f61cdfac5828bb252e3b7bd9574f9c46cc76f5075c01b4ab2a49782df8f36171b277ffb25a954485b0817755d520a
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0LHx:bCDOw9aMDooc+vAlXx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2