36cde2375eebbf6bfef48018b2cd722b9e9be6b7bc8cdcdbcaa5eb62a699a6b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-01_051258b5b48b3e2cb5466e49e97cd6c0_cryptolocker
Size

46KB
Sample

241001-h7a7va1fjb
MD5

051258b5b48b3e2cb5466e49e97cd6c0
SHA1

33fb0d7ff3e71858a7a03029fad2b44baaac48ce
SHA256

36cde2375eebbf6bfef48018b2cd722b9e9be6b7bc8cdcdbcaa5eb62a699a6b3
SHA512

6db872395c5cb9258ed594146c61bac27a76a1ada9969aa4756f44b44ac529bb7f2474b72f6f61ff94fbbf532ad5f4b67cac31a34c9f4108a29cbb6a8047c98a
SSDEEP

384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlIGe/1om:XS5nQJ24LR1bytOOtEvwDpjNbme/l

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-01_051258b5b48b3e2cb5466e49e97cd6c0_cryptolocker
- Size
  
  46KB
- MD5
  
  051258b5b48b3e2cb5466e49e97cd6c0
- SHA1
  
  33fb0d7ff3e71858a7a03029fad2b44baaac48ce
- SHA256
  
  36cde2375eebbf6bfef48018b2cd722b9e9be6b7bc8cdcdbcaa5eb62a699a6b3
- SHA512
  
  6db872395c5cb9258ed594146c61bac27a76a1ada9969aa4756f44b44ac529bb7f2474b72f6f61ff94fbbf532ad5f4b67cac31a34c9f4108a29cbb6a8047c98a
- SSDEEP
  
  384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlIGe/1om:XS5nQJ24LR1bytOOtEvwDpjNbme/l
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2