2d3e636adca9d8efd2c39207330ceb2200bf9567172010f2b928cf2db0447f19 | Triage

Sharing

General

Target

2024-09-07_ddb74fd56716ff8f1ceb58d470677397_cryptolocker
Size

32KB
Sample

240907-cpr5razgqe
MD5

ddb74fd56716ff8f1ceb58d470677397
SHA1

e5ef2c72e253ec732117dbbfae2093e356f0dc2c
SHA256

2d3e636adca9d8efd2c39207330ceb2200bf9567172010f2b928cf2db0447f19
SHA512

5e29957fbf79f62b0b62e4acf9e6e24ec201683a04704d9ba8f054e4ceafcc1f988afbe5c078c7cb5c0dfc04313bf8ddda740d6ca279cc669d482ee18294db2f
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdon:bAvJCYOOvbRPDEgXRcJG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_ddb74fd56716ff8f1ceb58d470677397_cryptolocker
- Size
  
  32KB
- MD5
  
  ddb74fd56716ff8f1ceb58d470677397
- SHA1
  
  e5ef2c72e253ec732117dbbfae2093e356f0dc2c
- SHA256
  
  2d3e636adca9d8efd2c39207330ceb2200bf9567172010f2b928cf2db0447f19
- SHA512
  
  5e29957fbf79f62b0b62e4acf9e6e24ec201683a04704d9ba8f054e4ceafcc1f988afbe5c078c7cb5c0dfc04313bf8ddda740d6ca279cc669d482ee18294db2f
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdon:bAvJCYOOvbRPDEgXRcJG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2