d1c7e98c99b40ef7515c6093949fecf32a4b0937d58b9dd93e494445b16dd1d4 | Triage

Sharing

General

Target

2024-09-13_ba217a166acd89904350c24efc60afe0_cryptolocker
Size

45KB
Sample

240913-lt45jswgrj
MD5

ba217a166acd89904350c24efc60afe0
SHA1

b8f7317ee940f1d62f4ff408c233bd5c3a73f1c6
SHA256

d1c7e98c99b40ef7515c6093949fecf32a4b0937d58b9dd93e494445b16dd1d4
SHA512

48bfadf3bdd4a4fdf765376fc1a3279e2ec4d0f4cb674541d41d757a5b5bfc4d7b7f9ced6cdc8a1f5869936d47a62bd2d7303f2ae50186cedf9a0bd68a7038fb
SSDEEP

384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk30:bm74zYcgT/EkM0ryfjd30

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-13_ba217a166acd89904350c24efc60afe0_cryptolocker
- Size
  
  45KB
- MD5
  
  ba217a166acd89904350c24efc60afe0
- SHA1
  
  b8f7317ee940f1d62f4ff408c233bd5c3a73f1c6
- SHA256
  
  d1c7e98c99b40ef7515c6093949fecf32a4b0937d58b9dd93e494445b16dd1d4
- SHA512
  
  48bfadf3bdd4a4fdf765376fc1a3279e2ec4d0f4cb674541d41d757a5b5bfc4d7b7f9ced6cdc8a1f5869936d47a62bd2d7303f2ae50186cedf9a0bd68a7038fb
- SSDEEP
  
  384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk30:bm74zYcgT/EkM0ryfjd30
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2