2762fc1be7fc7d1e54475a1d2c98494bc03ac2e532510bab3564845a705ae29e | Triage

Sharing

General

Target

2024-09-19_db1c94f336da684c6b4926e941cd1e13_cryptolocker
Size

88KB
Sample

240919-kfzr8szapb
MD5

db1c94f336da684c6b4926e941cd1e13
SHA1

13ee76e48199f3ffe97b216019b92dc67ab70799
SHA256

2762fc1be7fc7d1e54475a1d2c98494bc03ac2e532510bab3564845a705ae29e
SHA512

21c09e97998b1f201ae5adc6bed9ea4e800d4ee15fdaa15ff4cce92d59ad6faf392bd9b65028b57a9150c76a2229b27c3f27d7bc3cb0cc539196717daabcce21
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6aA:V6a+pOtEvwDpjvp0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-19_db1c94f336da684c6b4926e941cd1e13_cryptolocker
- Size
  
  88KB
- MD5
  
  db1c94f336da684c6b4926e941cd1e13
- SHA1
  
  13ee76e48199f3ffe97b216019b92dc67ab70799
- SHA256
  
  2762fc1be7fc7d1e54475a1d2c98494bc03ac2e532510bab3564845a705ae29e
- SHA512
  
  21c09e97998b1f201ae5adc6bed9ea4e800d4ee15fdaa15ff4cce92d59ad6faf392bd9b65028b57a9150c76a2229b27c3f27d7bc3cb0cc539196717daabcce21
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6aA:V6a+pOtEvwDpjvp0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2