917f1319cb96b1b1f562b7f34691cee2ae66132f26d1d739e2d48c02e16449b4 | Triage

Sharing

General

Target

2024-09-07_3f4b733c34563a9c6fa4e4cd2394168a_cryptolocker
Size

48KB
Sample

240907-bd7wdsxana
MD5

3f4b733c34563a9c6fa4e4cd2394168a
SHA1

2741d091ca59090e737ce2622d091944548bde7e
SHA256

917f1319cb96b1b1f562b7f34691cee2ae66132f26d1d739e2d48c02e16449b4
SHA512

3192915bd5c59be73dea6c0200f33382cf4c9ff8d8f23bcfd81209ac479d4a0390c81ddd0f737ff07085e9355880c5cdc7a1b80bf2a670490c007c8cd65c8bcb
SSDEEP

768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrt:y6QFElP6n+gMQMOtEvwDpjbizbR9XwzR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_3f4b733c34563a9c6fa4e4cd2394168a_cryptolocker
- Size
  
  48KB
- MD5
  
  3f4b733c34563a9c6fa4e4cd2394168a
- SHA1
  
  2741d091ca59090e737ce2622d091944548bde7e
- SHA256
  
  917f1319cb96b1b1f562b7f34691cee2ae66132f26d1d739e2d48c02e16449b4
- SHA512
  
  3192915bd5c59be73dea6c0200f33382cf4c9ff8d8f23bcfd81209ac479d4a0390c81ddd0f737ff07085e9355880c5cdc7a1b80bf2a670490c007c8cd65c8bcb
- SSDEEP
  
  768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrt:y6QFElP6n+gMQMOtEvwDpjbizbR9XwzR
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2