97957e6011592d490c0538bbad9aa97941c31c8c828777d218acd7e47ef98708 | Triage

Sharing

General

Target

2024-09-19_9d9fe7cae0cddf03850b680c8cf7dbbb_cryptolocker
Size

72KB
Sample

240919-d5cwfaygrn
MD5

9d9fe7cae0cddf03850b680c8cf7dbbb
SHA1

b6c7337974716dfa172260107805922add813784
SHA256

97957e6011592d490c0538bbad9aa97941c31c8c828777d218acd7e47ef98708
SHA512

d86652009399b284f53b261acd6dbf32a37c62ae264e4aafdbc15cb619d6e2fd568374753d5a71a5889b496331245b63264a44e9a88b2108ec5df4f5592279ec
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R7:vj+jsMQMOtEvwDpj5HZYTjipvF24D

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_9d9fe7cae0cddf03850b680c8cf7dbbb_cryptolocker
- Size
  
  72KB
- MD5
  
  9d9fe7cae0cddf03850b680c8cf7dbbb
- SHA1
  
  b6c7337974716dfa172260107805922add813784
- SHA256
  
  97957e6011592d490c0538bbad9aa97941c31c8c828777d218acd7e47ef98708
- SHA512
  
  d86652009399b284f53b261acd6dbf32a37c62ae264e4aafdbc15cb619d6e2fd568374753d5a71a5889b496331245b63264a44e9a88b2108ec5df4f5592279ec
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R7:vj+jsMQMOtEvwDpj5HZYTjipvF24D
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2