a0c3afd07c027c34f706b791f4197bd4a6ca57e1c1e34ecd32aac24038fefff4 | Triage

Sharing

General

Target

2024-09-07_c4f3bef838c025f7b48cba4d8681f595_cryptolocker
Size

76KB
Sample

240907-bqx7qaxeqn
MD5

c4f3bef838c025f7b48cba4d8681f595
SHA1

27aba9563561a8d29ec1bc8547fbda06ea6bb9fa
SHA256

a0c3afd07c027c34f706b791f4197bd4a6ca57e1c1e34ecd32aac24038fefff4
SHA512

a0d9cae0af2b4749177ad6d87b350db9aff5e9245c08ce94e8cc1e30c4a933520d73d843aa117be4b00a235a8d97fd4e2a6a54ecec02eaf36338b380371c3dd4
SSDEEP

768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsMXL:u6QFElP6n+gWMOtEvwDpjJGYQb+L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_c4f3bef838c025f7b48cba4d8681f595_cryptolocker
- Size
  
  76KB
- MD5
  
  c4f3bef838c025f7b48cba4d8681f595
- SHA1
  
  27aba9563561a8d29ec1bc8547fbda06ea6bb9fa
- SHA256
  
  a0c3afd07c027c34f706b791f4197bd4a6ca57e1c1e34ecd32aac24038fefff4
- SHA512
  
  a0d9cae0af2b4749177ad6d87b350db9aff5e9245c08ce94e8cc1e30c4a933520d73d843aa117be4b00a235a8d97fd4e2a6a54ecec02eaf36338b380371c3dd4
- SSDEEP
  
  768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsMXL:u6QFElP6n+gWMOtEvwDpjJGYQb+L
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2