3b3ae41a54d196a887e7baf5e61661b59dd412571ff4ce08da44e880182876be | Triage

Sharing

General

Target

2024-09-12_3c3161ab5e3c0c71051e6180c690ceda_cryptolocker
Size

48KB
Sample

240912-c2w98sxakg
MD5

3c3161ab5e3c0c71051e6180c690ceda
SHA1

b01290f7cf4965ef74e58c3a82359393d37f7196
SHA256

3b3ae41a54d196a887e7baf5e61661b59dd412571ff4ce08da44e880182876be
SHA512

2aaa0fcfb86916ed3b7da836fe1e11d3107cc84b162937ce77a36db5ff26e0b900dda8834fca0892e68173e1bccef4bfa709dcc2111411f2b1678d9ea2c9538d
SSDEEP

384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2Vt:79inqyNR/QtOOtEvwDpjBKccJVODvy3M

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_3c3161ab5e3c0c71051e6180c690ceda_cryptolocker
- Size
  
  48KB
- MD5
  
  3c3161ab5e3c0c71051e6180c690ceda
- SHA1
  
  b01290f7cf4965ef74e58c3a82359393d37f7196
- SHA256
  
  3b3ae41a54d196a887e7baf5e61661b59dd412571ff4ce08da44e880182876be
- SHA512
  
  2aaa0fcfb86916ed3b7da836fe1e11d3107cc84b162937ce77a36db5ff26e0b900dda8834fca0892e68173e1bccef4bfa709dcc2111411f2b1678d9ea2c9538d
- SSDEEP
  
  384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2Vt:79inqyNR/QtOOtEvwDpjBKccJVODvy3M
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2