9c289b92ed0770078d047f81ebc577ab49a57e09c8983e67a0cb0196eca73898 | Triage

Sharing

General

Target

2024-09-19_cb0dc54d000f371f428258dd52241b7a_cryptolocker
Size

32KB
Sample

240919-d8b4bazamq
MD5

cb0dc54d000f371f428258dd52241b7a
SHA1

f6543e4480b93c2dbc61c9b1856960cf801a36d0
SHA256

9c289b92ed0770078d047f81ebc577ab49a57e09c8983e67a0cb0196eca73898
SHA512

5f321cbd489d5692be5a37c0e64431dccbf867035848487544b2b05203eec387df5a8476852889b7a8ca64b27bda25c8ca96f24d790d9328cfbad26817673505
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNj:btB9g/WItCSsAGjX7e9Nj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_cb0dc54d000f371f428258dd52241b7a_cryptolocker
- Size
  
  32KB
- MD5
  
  cb0dc54d000f371f428258dd52241b7a
- SHA1
  
  f6543e4480b93c2dbc61c9b1856960cf801a36d0
- SHA256
  
  9c289b92ed0770078d047f81ebc577ab49a57e09c8983e67a0cb0196eca73898
- SHA512
  
  5f321cbd489d5692be5a37c0e64431dccbf867035848487544b2b05203eec387df5a8476852889b7a8ca64b27bda25c8ca96f24d790d9328cfbad26817673505
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNj:btB9g/WItCSsAGjX7e9Nj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2