c29f34e42dabf7e9da44beaf4167c8daf839dfa1f1d305a40e4509663a284212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-12_373d1ce5f9ec9297d94c0c1c4588a2b8_cryptolocker
Size

71KB
Sample

240912-3cdpps1grd
MD5

373d1ce5f9ec9297d94c0c1c4588a2b8
SHA1

92f96dfa0f44b333e2418d521039fcfbd3d5f528
SHA256

c29f34e42dabf7e9da44beaf4167c8daf839dfa1f1d305a40e4509663a284212
SHA512

278c67ba6eb18f59b9e99ca332a244e24337d4f116843ba10fb8e7cfce2a0d628b15690a704a7b89904c25d068289df1f4d055fde2e1a1ab16dce676ca520302
SSDEEP

768:z6LsoEEeegiZPvEhHSG+gSum/kLyMro2U97DctOOtEvwDpjXN:z6QFElP6n+gLmddkMOtEvwDpjd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_373d1ce5f9ec9297d94c0c1c4588a2b8_cryptolocker
- Size
  
  71KB
- MD5
  
  373d1ce5f9ec9297d94c0c1c4588a2b8
- SHA1
  
  92f96dfa0f44b333e2418d521039fcfbd3d5f528
- SHA256
  
  c29f34e42dabf7e9da44beaf4167c8daf839dfa1f1d305a40e4509663a284212
- SHA512
  
  278c67ba6eb18f59b9e99ca332a244e24337d4f116843ba10fb8e7cfce2a0d628b15690a704a7b89904c25d068289df1f4d055fde2e1a1ab16dce676ca520302
- SSDEEP
  
  768:z6LsoEEeegiZPvEhHSG+gSum/kLyMro2U97DctOOtEvwDpjXN:z6QFElP6n+gLmddkMOtEvwDpjd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2