392a5392319e0e74680224d10180f7d8a8f3566e4095a496a34ca52775f1c021 | Triage

Sharing

General

Target

2024-09-19_77a3fe46ed182f9a90d5568076d3cb0b_cryptolocker
Size

33KB
Sample

240919-d3el9ayejg
MD5

77a3fe46ed182f9a90d5568076d3cb0b
SHA1

f15fded303fa01ab9416a2eaec237a49c98a04f2
SHA256

392a5392319e0e74680224d10180f7d8a8f3566e4095a496a34ca52775f1c021
SHA512

ee75d2020124ac092c070f3338040d069143d12a0e71d53a5083c8e9237e9399eac074fd2c8a51210809c5273e84d95e186544be8ef073008be0c3f5df17b2e1
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzogFzpjufAq18vw:bAvJCYOOvbRPDEgXVFzpCYVvw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_77a3fe46ed182f9a90d5568076d3cb0b_cryptolocker
- Size
  
  33KB
- MD5
  
  77a3fe46ed182f9a90d5568076d3cb0b
- SHA1
  
  f15fded303fa01ab9416a2eaec237a49c98a04f2
- SHA256
  
  392a5392319e0e74680224d10180f7d8a8f3566e4095a496a34ca52775f1c021
- SHA512
  
  ee75d2020124ac092c070f3338040d069143d12a0e71d53a5083c8e9237e9399eac074fd2c8a51210809c5273e84d95e186544be8ef073008be0c3f5df17b2e1
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzogFzpjufAq18vw:bAvJCYOOvbRPDEgXVFzpCYVvw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2