72679ff4d1e53bc75619eeb98730a84375246192c019ca1f40eb1703847ce7d4 | Triage

Sharing

General

Target

2024-09-07_c9a13d6062fa5095ba3136674cfae896_cryptolocker
Size

26KB
Sample

240907-bzg7vsyekg
MD5

c9a13d6062fa5095ba3136674cfae896
SHA1

8c8ccfb6f3e6991cf152670376f0703bafdabd78
SHA256

72679ff4d1e53bc75619eeb98730a84375246192c019ca1f40eb1703847ce7d4
SHA512

9263c28fa6ce4e14d6b43332f69a081a2663431da6e316b610db745c3e9d4735e9195a0239272e8591a78efba9c63f786daca6db8a8cc84c9fae4621a438b947
SSDEEP

384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HNbN:bIDOw9UiaCHfjnE0S7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_c9a13d6062fa5095ba3136674cfae896_cryptolocker
- Size
  
  26KB
- MD5
  
  c9a13d6062fa5095ba3136674cfae896
- SHA1
  
  8c8ccfb6f3e6991cf152670376f0703bafdabd78
- SHA256
  
  72679ff4d1e53bc75619eeb98730a84375246192c019ca1f40eb1703847ce7d4
- SHA512
  
  9263c28fa6ce4e14d6b43332f69a081a2663431da6e316b610db745c3e9d4735e9195a0239272e8591a78efba9c63f786daca6db8a8cc84c9fae4621a438b947
- SSDEEP
  
  384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HNbN:bIDOw9UiaCHfjnE0S7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2