3cea3d8df8873edbece5d125f7785976ae36b0326e632b79c53d5b69f084415b | Triage

Sharing

General

Target

2024-09-19_d5efe0d35458f5567c14c3b532cd6cf7_cryptolocker
Size

43KB
Sample

240919-f9vyxstang
MD5

d5efe0d35458f5567c14c3b532cd6cf7
SHA1

ca1d33c28740b4a03e07bcf4a74ad6b3c12a84e5
SHA256

3cea3d8df8873edbece5d125f7785976ae36b0326e632b79c53d5b69f084415b
SHA512

a6c43658498e279f145c90475f661e453138272837cdd556fc163b1c1024926f41cff8ee45fa2d8bab490be1d1f82b1a88aef788c54936f42594ac068b5ad324
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrA:bCDOw9aMDooc+vAqj8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_d5efe0d35458f5567c14c3b532cd6cf7_cryptolocker
- Size
  
  43KB
- MD5
  
  d5efe0d35458f5567c14c3b532cd6cf7
- SHA1
  
  ca1d33c28740b4a03e07bcf4a74ad6b3c12a84e5
- SHA256
  
  3cea3d8df8873edbece5d125f7785976ae36b0326e632b79c53d5b69f084415b
- SHA512
  
  a6c43658498e279f145c90475f661e453138272837cdd556fc163b1c1024926f41cff8ee45fa2d8bab490be1d1f82b1a88aef788c54936f42594ac068b5ad324
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqjrA:bCDOw9aMDooc+vAqj8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2