2dbc852eadbf5f45b02d35c53b2bd4c75e71d375ee89042892e05a74c5fb6f59 | Triage

Sharing

General

Target

2024-09-12_417a64bff2b9e7d5098247ae6300df75_cryptolocker
Size

32KB
Sample

240912-d29e8syhje
MD5

417a64bff2b9e7d5098247ae6300df75
SHA1

dc349a20bfd2aaa790014257f0ad452a04fe7e43
SHA256

2dbc852eadbf5f45b02d35c53b2bd4c75e71d375ee89042892e05a74c5fb6f59
SHA512

d627802299cb55251db0bfe5f7b2ec36141b9e0dc263e52359fc127a6d50da1a2e7075c5f26b7dadeaa9660332f093f9cfc87fa711bc1d0a4efa01489789aac4
SSDEEP

384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXB5:bG74zYcgT/Ekd0ryfjq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_417a64bff2b9e7d5098247ae6300df75_cryptolocker
- Size
  
  32KB
- MD5
  
  417a64bff2b9e7d5098247ae6300df75
- SHA1
  
  dc349a20bfd2aaa790014257f0ad452a04fe7e43
- SHA256
  
  2dbc852eadbf5f45b02d35c53b2bd4c75e71d375ee89042892e05a74c5fb6f59
- SHA512
  
  d627802299cb55251db0bfe5f7b2ec36141b9e0dc263e52359fc127a6d50da1a2e7075c5f26b7dadeaa9660332f093f9cfc87fa711bc1d0a4efa01489789aac4
- SSDEEP
  
  384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXB5:bG74zYcgT/Ekd0ryfjq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2