317c95d9c75038c97741864f7bf46fd5ff3b2a4b25b67071d3e1def1035eef19 | Triage

Sharing

General

Target

2024-09-06_cd855640b1d13dd9cdf34fcfac1ae792_cryptolocker
Size

72KB
Sample

240906-nmzmlavara
MD5

cd855640b1d13dd9cdf34fcfac1ae792
SHA1

01816c356700792b4c2682f75779cda2646077fc
SHA256

317c95d9c75038c97741864f7bf46fd5ff3b2a4b25b67071d3e1def1035eef19
SHA512

230c8075423f13bb76dd009e122108ed157e4c007ff0e0f398b934a800d57a9ad857dcbe02ce04046cff67f6d7c83b557515e18ad9bb965dd17b39f3c4e6f002
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOnO:DW60sllyWOtEvwDpjwF85l

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-06_cd855640b1d13dd9cdf34fcfac1ae792_cryptolocker
- Size
  
  72KB
- MD5
  
  cd855640b1d13dd9cdf34fcfac1ae792
- SHA1
  
  01816c356700792b4c2682f75779cda2646077fc
- SHA256
  
  317c95d9c75038c97741864f7bf46fd5ff3b2a4b25b67071d3e1def1035eef19
- SHA512
  
  230c8075423f13bb76dd009e122108ed157e4c007ff0e0f398b934a800d57a9ad857dcbe02ce04046cff67f6d7c83b557515e18ad9bb965dd17b39f3c4e6f002
- SSDEEP
  
  1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOnO:DW60sllyWOtEvwDpjwF85l
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2