b047bbb59e6a492018d2b805facc1ace069be35612b38a2932515220a0068762 | Triage

Sharing

General

Target

2024-09-19_d03d5b5ae0399d2136978c4021359df6_cryptolocker
Size

46KB
Sample

240919-a3ltsasbmj
MD5

d03d5b5ae0399d2136978c4021359df6
SHA1

94914f4fd1d84e05dea14e05c7169984008925b6
SHA256

b047bbb59e6a492018d2b805facc1ace069be35612b38a2932515220a0068762
SHA512

a2cb7e01a6d4e271a72105348a58cde5c2b26e79864926914f3e513fbab31d2d375cc0465e42a089c2c6d0de862dfe9575aef7b2daaf797c38eba221fd418733
SSDEEP

384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlIGe/N:XS5nQJ24LR1bytOOtEvwDpjNbme/N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_d03d5b5ae0399d2136978c4021359df6_cryptolocker
- Size
  
  46KB
- MD5
  
  d03d5b5ae0399d2136978c4021359df6
- SHA1
  
  94914f4fd1d84e05dea14e05c7169984008925b6
- SHA256
  
  b047bbb59e6a492018d2b805facc1ace069be35612b38a2932515220a0068762
- SHA512
  
  a2cb7e01a6d4e271a72105348a58cde5c2b26e79864926914f3e513fbab31d2d375cc0465e42a089c2c6d0de862dfe9575aef7b2daaf797c38eba221fd418733
- SSDEEP
  
  384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlIGe/N:XS5nQJ24LR1bytOOtEvwDpjNbme/N
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2