683e65b994cdaf85604f574af4fa70e3e7a654b073c2ae6adfa1b2009ad8fb9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_3f7d8923df07dc339e0e55ffb3e05211_cryptolocker
Size

86KB
Sample

240907-jacvvasarm
MD5

3f7d8923df07dc339e0e55ffb3e05211
SHA1

0059b016220cbe941ef3b11c6abf5cc99cc63840
SHA256

683e65b994cdaf85604f574af4fa70e3e7a654b073c2ae6adfa1b2009ad8fb9e
SHA512

3054a108b147acb553d8b48b1b15d5b40e5cb48c7b43e307ad1a92d642b55b9354b472f5c40c9e7be1c5792f6e0d3de9032716a5171a0559debc396b9e9a3b4c
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6ag4:V6a+pOtEvwDpjvp5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-07_3f7d8923df07dc339e0e55ffb3e05211_cryptolocker
- Size
  
  86KB
- MD5
  
  3f7d8923df07dc339e0e55ffb3e05211
- SHA1
  
  0059b016220cbe941ef3b11c6abf5cc99cc63840
- SHA256
  
  683e65b994cdaf85604f574af4fa70e3e7a654b073c2ae6adfa1b2009ad8fb9e
- SHA512
  
  3054a108b147acb553d8b48b1b15d5b40e5cb48c7b43e307ad1a92d642b55b9354b472f5c40c9e7be1c5792f6e0d3de9032716a5171a0559debc396b9e9a3b4c
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6ag4:V6a+pOtEvwDpjvp5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2