b4f579ccbda3d20e3f6a97cbc97071699f8af90da18bb30fc1ea87c5d35e3f19 | Triage

Sharing

General

Target

2024-09-12_7a3507e1345e0268879393479f9752ff_cryptolocker
Size

36KB
Sample

240912-kb1hzazbjk
MD5

7a3507e1345e0268879393479f9752ff
SHA1

d231098ecf848b241d718039a9a6ba4d6dbeeb51
SHA256

b4f579ccbda3d20e3f6a97cbc97071699f8af90da18bb30fc1ea87c5d35e3f19
SHA512

bad2ff92c6a58f35fb42fb8269dcf6a79b230abe59af171ee7568d776d880ad9640d2fae71d361635e4f6bd96d8f0f99df6b8da813b3204057cd733d7bf87270
SSDEEP

768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmU3U:bxNrC7kYo1Fxf2rYPL3U

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-12_7a3507e1345e0268879393479f9752ff_cryptolocker
- Size
  
  36KB
- MD5
  
  7a3507e1345e0268879393479f9752ff
- SHA1
  
  d231098ecf848b241d718039a9a6ba4d6dbeeb51
- SHA256
  
  b4f579ccbda3d20e3f6a97cbc97071699f8af90da18bb30fc1ea87c5d35e3f19
- SHA512
  
  bad2ff92c6a58f35fb42fb8269dcf6a79b230abe59af171ee7568d776d880ad9640d2fae71d361635e4f6bd96d8f0f99df6b8da813b3204057cd733d7bf87270
- SSDEEP
  
  768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmU3U:bxNrC7kYo1Fxf2rYPL3U
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2