03a8a4335d1cae2d87a1a52a9853d134cf8fff312bd3388edf92c6fe12631332 | Triage

Sharing

General

Target

2024-09-11_e3c3ee4743ed7be4ade8a170d4e14cb3_cryptolocker
Size

73KB
Sample

240911-n3a9yazapd
MD5

e3c3ee4743ed7be4ade8a170d4e14cb3
SHA1

9c849dd1dd5c1eed3a981d084ce19c8b1f35dcea
SHA256

03a8a4335d1cae2d87a1a52a9853d134cf8fff312bd3388edf92c6fe12631332
SHA512

5a5dfae9607e4d51a8bec3acff76d894a2d4e0feee02e9fb53249c62ccd43def9b2d8af4949ddcb0628d0a5ad69d6827d8e361ead757e4397dfcc1bf060b32f3
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RG:vj+jsMQMOtEvwDpj5HZYTjipvF24pM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-11_e3c3ee4743ed7be4ade8a170d4e14cb3_cryptolocker
- Size
  
  73KB
- MD5
  
  e3c3ee4743ed7be4ade8a170d4e14cb3
- SHA1
  
  9c849dd1dd5c1eed3a981d084ce19c8b1f35dcea
- SHA256
  
  03a8a4335d1cae2d87a1a52a9853d134cf8fff312bd3388edf92c6fe12631332
- SHA512
  
  5a5dfae9607e4d51a8bec3acff76d894a2d4e0feee02e9fb53249c62ccd43def9b2d8af4949ddcb0628d0a5ad69d6827d8e361ead757e4397dfcc1bf060b32f3
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RG:vj+jsMQMOtEvwDpj5HZYTjipvF24pM
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2