0316e6ca691f026d988941aca44fe17700ae4c389b5a392f118668526a61ff4b | Triage

Sharing

General

Target

2024-10-01_34f67ed1fa7dc1b5e8b935efb3023eb9_cryptolocker
Size

32KB
Sample

241001-19yd9sxbng
MD5

34f67ed1fa7dc1b5e8b935efb3023eb9
SHA1

d2a1ac5734736f8df037045afa8372f64ea29446
SHA256

0316e6ca691f026d988941aca44fe17700ae4c389b5a392f118668526a61ff4b
SHA512

963c41046373d0ea06da431585c3e178a729e1b17d9e57642aa18d1594fb8b11acb7d6d9bce535d8d4266ed90127232b6df8c81b971fa28e17b2d1c976446267
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdo9:bAvJCYOOvbRPDEgXRcJQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_34f67ed1fa7dc1b5e8b935efb3023eb9_cryptolocker
- Size
  
  32KB
- MD5
  
  34f67ed1fa7dc1b5e8b935efb3023eb9
- SHA1
  
  d2a1ac5734736f8df037045afa8372f64ea29446
- SHA256
  
  0316e6ca691f026d988941aca44fe17700ae4c389b5a392f118668526a61ff4b
- SHA512
  
  963c41046373d0ea06da431585c3e178a729e1b17d9e57642aa18d1594fb8b11acb7d6d9bce535d8d4266ed90127232b6df8c81b971fa28e17b2d1c976446267
- SSDEEP
  
  384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdo9:bAvJCYOOvbRPDEgXRcJQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2