2f90ba0537f5097ddd529e2a44cef6207d1b91eb5018439a15319fdc05b25ec2 | Triage

Sharing

General

Target

2024-09-21_f37dd9fd47938cb9f70690d973e5f11c_cryptolocker
Size

63KB
Sample

240921-ecwzaatdnc
MD5

f37dd9fd47938cb9f70690d973e5f11c
SHA1

2a4ae2ed23a30ec2be6c58c35a8da3e08b62cec8
SHA256

2f90ba0537f5097ddd529e2a44cef6207d1b91eb5018439a15319fdc05b25ec2
SHA512

3e4fee0c866b1f3a11869ae98aeeed372193561e2d9e6b38c8b0fe78467c1fef455ad4737e95230d959bb9dfb20cceccd9a4dcd58ab4f5b91713f07cfc7e6f41
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36ucN/:ZVxkGOtEvwDpjcaK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_f37dd9fd47938cb9f70690d973e5f11c_cryptolocker
- Size
  
  63KB
- MD5
  
  f37dd9fd47938cb9f70690d973e5f11c
- SHA1
  
  2a4ae2ed23a30ec2be6c58c35a8da3e08b62cec8
- SHA256
  
  2f90ba0537f5097ddd529e2a44cef6207d1b91eb5018439a15319fdc05b25ec2
- SHA512
  
  3e4fee0c866b1f3a11869ae98aeeed372193561e2d9e6b38c8b0fe78467c1fef455ad4737e95230d959bb9dfb20cceccd9a4dcd58ab4f5b91713f07cfc7e6f41
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36ucN/:ZVxkGOtEvwDpjcaK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2