a385e1420aef90f610c066aec9b02ee460f751ec85d0dea8733637f0f7b63080 | Triage

Sharing

General

Target

2024-09-21_f3c76b50d67dfa9bf70ccbfde76ee83c_cryptolocker
Size

39KB
Sample

240921-z9d5ysvdkj
MD5

f3c76b50d67dfa9bf70ccbfde76ee83c
SHA1

d526bdd7c80b4150bbb4aa02dcd20d80e7fbb71f
SHA256

a385e1420aef90f610c066aec9b02ee460f751ec85d0dea8733637f0f7b63080
SHA512

aa1f80ab8007e802c322ad8f24513d45e0a9d4d5f86669838faf261c004af7bb8ae391b151ee667a00a62db504b6292084cfc80bfd74609d6ae1e66cb555a226
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Upah:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-21_f3c76b50d67dfa9bf70ccbfde76ee83c_cryptolocker
- Size
  
  39KB
- MD5
  
  f3c76b50d67dfa9bf70ccbfde76ee83c
- SHA1
  
  d526bdd7c80b4150bbb4aa02dcd20d80e7fbb71f
- SHA256
  
  a385e1420aef90f610c066aec9b02ee460f751ec85d0dea8733637f0f7b63080
- SHA512
  
  aa1f80ab8007e802c322ad8f24513d45e0a9d4d5f86669838faf261c004af7bb8ae391b151ee667a00a62db504b6292084cfc80bfd74609d6ae1e66cb555a226
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Upah:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2