febcb3b5311a6526f0b9da2d4b0815ba67a5df871f7e474b4223d9dae60f0f24 | Triage

Sharing

General

Target

2024-09-27_65c33a60ca808aedf2e34075839b78d4_cryptolocker
Size

788KB
Sample

240927-qzt9ravepn
MD5

65c33a60ca808aedf2e34075839b78d4
SHA1

7714ec9c03c62ec48adac12def9297ff16179150
SHA256

febcb3b5311a6526f0b9da2d4b0815ba67a5df871f7e474b4223d9dae60f0f24
SHA512

64580972d588d5f788828f0346e6bebe458b359b87f7fe37634cc220c386eafe4c9949fe3db87eab61cb1a8258f1690caf818932e940889289975a69da6b1d67
SSDEEP

24576:aHQVCB9lVF1lVF1lVFkUEi019za5F+DLK9bygw6X/pZ:aHAg9lVF1lVF1lVFkUEiiCX/z

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-27_65c33a60ca808aedf2e34075839b78d4_cryptolocker
- Size
  
  788KB
- MD5
  
  65c33a60ca808aedf2e34075839b78d4
- SHA1
  
  7714ec9c03c62ec48adac12def9297ff16179150
- SHA256
  
  febcb3b5311a6526f0b9da2d4b0815ba67a5df871f7e474b4223d9dae60f0f24
- SHA512
  
  64580972d588d5f788828f0346e6bebe458b359b87f7fe37634cc220c386eafe4c9949fe3db87eab61cb1a8258f1690caf818932e940889289975a69da6b1d67
- SSDEEP
  
  24576:aHQVCB9lVF1lVF1lVFkUEi019za5F+DLK9bygw6X/pZ:aHAg9lVF1lVF1lVFkUEiiCX/z
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2