647306a2da7ec464401629cd5bb6fce4db359bf9335d9f33309e3a5ad8a37287 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_3477b07c56cd2c036441c6a03ac68d00_cryptolocker
Size

46KB
Sample

240906-m2afksscql
MD5

3477b07c56cd2c036441c6a03ac68d00
SHA1

a6e910491899272e5b9f4c3a54173fb25d977fe7
SHA256

647306a2da7ec464401629cd5bb6fce4db359bf9335d9f33309e3a5ad8a37287
SHA512

7bb853a32bb5ea9cbd511e436bac875f24d024e3fabd3249abeea5d6bae64e224c7202c97f151bfe460da50ab5efa2b4c05fb0e9455a45a235d32c373f15e970
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJ+:6j+1NMOtEvwDpjrRraJ+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-06_3477b07c56cd2c036441c6a03ac68d00_cryptolocker
- Size
  
  46KB
- MD5
  
  3477b07c56cd2c036441c6a03ac68d00
- SHA1
  
  a6e910491899272e5b9f4c3a54173fb25d977fe7
- SHA256
  
  647306a2da7ec464401629cd5bb6fce4db359bf9335d9f33309e3a5ad8a37287
- SHA512
  
  7bb853a32bb5ea9cbd511e436bac875f24d024e3fabd3249abeea5d6bae64e224c7202c97f151bfe460da50ab5efa2b4c05fb0e9455a45a235d32c373f15e970
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDhkJ+:6j+1NMOtEvwDpjrRraJ+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2