b3859c6e4ce589d176b9335584304b767c3573efa8b9c0f07f33e345f0a25e0f | Triage

Sharing

General

Target

2024-09-06_3c9fb08f50e35438da88674eacf8931b_cryptolocker
Size

72KB
Sample

240906-f2vcesyfja
MD5

3c9fb08f50e35438da88674eacf8931b
SHA1

98613dee6af9ede5be1e89de7d33eb1981e1855f
SHA256

b3859c6e4ce589d176b9335584304b767c3573efa8b9c0f07f33e345f0a25e0f
SHA512

60c41764e82cec3d7016c8ec548411d538ff0c0fef67fd308da6eaf11c496198d237dbbd0a057ba18bf9b2a6699e91d699084c7d0a4427fac7ac5700efd8db5a
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO7:DW60sllyWOtEvwDpjwF85c

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-06_3c9fb08f50e35438da88674eacf8931b_cryptolocker
- Size
  
  72KB
- MD5
  
  3c9fb08f50e35438da88674eacf8931b
- SHA1
  
  98613dee6af9ede5be1e89de7d33eb1981e1855f
- SHA256
  
  b3859c6e4ce589d176b9335584304b767c3573efa8b9c0f07f33e345f0a25e0f
- SHA512
  
  60c41764e82cec3d7016c8ec548411d538ff0c0fef67fd308da6eaf11c496198d237dbbd0a057ba18bf9b2a6699e91d699084c7d0a4427fac7ac5700efd8db5a
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO7:DW60sllyWOtEvwDpjwF85c
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2