13733cb1e9fb794cb07a3f4c02d17e7f6e2baef65566179ecab7a3a5e09a1eb8 | Triage

Sharing

General

Target

2024-09-11_2830acd75723fee95d1da376702e4a60_cryptolocker
Size

39KB
Sample

240911-d5sa5a1erg
MD5

2830acd75723fee95d1da376702e4a60
SHA1

def92be1d9bf097fe92e2ea10ba7bab75c2374d3
SHA256

13733cb1e9fb794cb07a3f4c02d17e7f6e2baef65566179ecab7a3a5e09a1eb8
SHA512

a6a68b21b127ab990da58f3d9975f2ad981d3202fafe34b0a53834fc090e900647844b39aaeb53172ea817a322c16831e2069b441f97bc52e3cb8ba16ed012aa
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3L6:btB9g/WItCSsAGjX7e9N0hunRvW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-11_2830acd75723fee95d1da376702e4a60_cryptolocker
- Size
  
  39KB
- MD5
  
  2830acd75723fee95d1da376702e4a60
- SHA1
  
  def92be1d9bf097fe92e2ea10ba7bab75c2374d3
- SHA256
  
  13733cb1e9fb794cb07a3f4c02d17e7f6e2baef65566179ecab7a3a5e09a1eb8
- SHA512
  
  a6a68b21b127ab990da58f3d9975f2ad981d3202fafe34b0a53834fc090e900647844b39aaeb53172ea817a322c16831e2069b441f97bc52e3cb8ba16ed012aa
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3L6:btB9g/WItCSsAGjX7e9N0hunRvW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2