033ffbbcbefecaabd982c386016192c1286ed83ba2db8abc700cd0587efed33b | Triage

Sharing

General

Target

2024-09-15_e0ace5845c7caf09fdbbebee68b6a7e6_cryptolocker
Size

70KB
Sample

240915-j9mt4avbrq
MD5

e0ace5845c7caf09fdbbebee68b6a7e6
SHA1

34c0c28296eced66db9c5097ee8787506a7b2a2f
SHA256

033ffbbcbefecaabd982c386016192c1286ed83ba2db8abc700cd0587efed33b
SHA512

92106a639f34f4fa48e1c63f05d5e5e5adcb665e9c3ea6c685e111515a7d00a949e177ada3dd79a131b396b68cbf5bca9354869456c03a3a787b5a6887831c11
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI0tSAp:6j+1NMOtEvwDpjr8ox8UDEpN/jhDp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-15_e0ace5845c7caf09fdbbebee68b6a7e6_cryptolocker
- Size
  
  70KB
- MD5
  
  e0ace5845c7caf09fdbbebee68b6a7e6
- SHA1
  
  34c0c28296eced66db9c5097ee8787506a7b2a2f
- SHA256
  
  033ffbbcbefecaabd982c386016192c1286ed83ba2db8abc700cd0587efed33b
- SHA512
  
  92106a639f34f4fa48e1c63f05d5e5e5adcb665e9c3ea6c685e111515a7d00a949e177ada3dd79a131b396b68cbf5bca9354869456c03a3a787b5a6887831c11
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI0tSAp:6j+1NMOtEvwDpjr8ox8UDEpN/jhDp
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2