75afda2e345038e88218cc7e4403a0cb15e6d11421d3f756d1082a0ef865c1f3 | Triage

Sharing

General

Target

2024-09-29_2041a40ed0b50608453298a0985f986c_cryptolocker
Size

32KB
Sample

240929-dxhfys1bng
MD5

2041a40ed0b50608453298a0985f986c
SHA1

e77ec9b62da018b1a6e52511e90a7aeeb4848e93
SHA256

75afda2e345038e88218cc7e4403a0cb15e6d11421d3f756d1082a0ef865c1f3
SHA512

fbe4be421001e2dd78742e272c18c68a542a0afeda6cf61e493b64c7a1ba73ef8f7e83151db5d3086d5ee2c94e706c702b9994121207834847a1bd4b9ae5cf03
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B4lWX:btB9g/WItCSsAGjX7r3B4Y

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-29_2041a40ed0b50608453298a0985f986c_cryptolocker
- Size
  
  32KB
- MD5
  
  2041a40ed0b50608453298a0985f986c
- SHA1
  
  e77ec9b62da018b1a6e52511e90a7aeeb4848e93
- SHA256
  
  75afda2e345038e88218cc7e4403a0cb15e6d11421d3f756d1082a0ef865c1f3
- SHA512
  
  fbe4be421001e2dd78742e272c18c68a542a0afeda6cf61e493b64c7a1ba73ef8f7e83151db5d3086d5ee2c94e706c702b9994121207834847a1bd4b9ae5cf03
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B4lWX:btB9g/WItCSsAGjX7r3B4Y
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2