a993d8e7734b6a3a3c698dfcf972510113ce50f1f3218b54152a23fed959584b | Triage

Sharing

General

Target

2024-09-29_c01cd3f7fa9ebf15566b171e429c9863_cryptolocker
Size

33KB
Sample

240929-hptw8stdkm
MD5

c01cd3f7fa9ebf15566b171e429c9863
SHA1

21831220ee218be5dc66b9849dbe66991fd70e45
SHA256

a993d8e7734b6a3a3c698dfcf972510113ce50f1f3218b54152a23fed959584b
SHA512

1714d577bfc9aa0ea904095f8661df49cf1bae4779162a4e64f3276403afc49eedd23ec27d2819836c1e4268fbbfe8867bca5ace24e7390268c22c6945b1fe14
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8kpcz:bgX4zYcgTEu6QOaryfjqDDw3sCV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-29_c01cd3f7fa9ebf15566b171e429c9863_cryptolocker
- Size
  
  33KB
- MD5
  
  c01cd3f7fa9ebf15566b171e429c9863
- SHA1
  
  21831220ee218be5dc66b9849dbe66991fd70e45
- SHA256
  
  a993d8e7734b6a3a3c698dfcf972510113ce50f1f3218b54152a23fed959584b
- SHA512
  
  1714d577bfc9aa0ea904095f8661df49cf1bae4779162a4e64f3276403afc49eedd23ec27d2819836c1e4268fbbfe8867bca5ace24e7390268c22c6945b1fe14
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8kpcz:bgX4zYcgTEu6QOaryfjqDDw3sCV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2