9104de58333dc4200bab41bd32873ceb215484073d50d05d4906e78baf928ef7 | Triage

Sharing

General

Target

2024-09-19_7ca20b22c52334a580b3d7420779bc1e_cryptolocker
Size

87KB
Sample

240919-d3t2yayglk
MD5

7ca20b22c52334a580b3d7420779bc1e
SHA1

c15e10ce03c19dde019e0950d7121377adcc3298
SHA256

9104de58333dc4200bab41bd32873ceb215484073d50d05d4906e78baf928ef7
SHA512

7b12c73112fca50b9ef18e94ff0fbe40b7f536abfb9310f147e42355808115665d30a72d5be27d5098b136eb1dcc57588d3579f6651b9971fd7a86840b3f25ba
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBlk:vCjsIOtEvwDpj5H9YvQd2C

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_7ca20b22c52334a580b3d7420779bc1e_cryptolocker
- Size
  
  87KB
- MD5
  
  7ca20b22c52334a580b3d7420779bc1e
- SHA1
  
  c15e10ce03c19dde019e0950d7121377adcc3298
- SHA256
  
  9104de58333dc4200bab41bd32873ceb215484073d50d05d4906e78baf928ef7
- SHA512
  
  7b12c73112fca50b9ef18e94ff0fbe40b7f536abfb9310f147e42355808115665d30a72d5be27d5098b136eb1dcc57588d3579f6651b9971fd7a86840b3f25ba
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBlk:vCjsIOtEvwDpj5H9YvQd2C
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2