de01b1da41599c6b6d15505e1c78fd59d828c10f95d2e730a5332e58ea02e437 | Triage

Sharing

General

Target

2024-09-07_9470fa3ea6b970cd28c53a98ef55828f_cryptolocker
Size

48KB
Sample

240907-hhf2sszgne
MD5

9470fa3ea6b970cd28c53a98ef55828f
SHA1

d5dab009d0ff505a0f9b63a0ea493c8fb07b1714
SHA256

de01b1da41599c6b6d15505e1c78fd59d828c10f95d2e730a5332e58ea02e437
SHA512

fb1c614e1d75837ec58430cb0ba450ef9abc7e5dda753e9a93f7611865547f843b7f075ddbab7411bfe545b607a5c9e257a860828b32d9c53ea65f579e2e578d
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4wj:xj+VGMOtEvwDpjy+TN4wj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_9470fa3ea6b970cd28c53a98ef55828f_cryptolocker
- Size
  
  48KB
- MD5
  
  9470fa3ea6b970cd28c53a98ef55828f
- SHA1
  
  d5dab009d0ff505a0f9b63a0ea493c8fb07b1714
- SHA256
  
  de01b1da41599c6b6d15505e1c78fd59d828c10f95d2e730a5332e58ea02e437
- SHA512
  
  fb1c614e1d75837ec58430cb0ba450ef9abc7e5dda753e9a93f7611865547f843b7f075ddbab7411bfe545b607a5c9e257a860828b32d9c53ea65f579e2e578d
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4wj:xj+VGMOtEvwDpjy+TN4wj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2