3d231474c4a82bcf1f63146efa9b6964907bf4a167ff088f44e9784f9ead0d1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-03_565561359777ab107ddfeb78dbbc79e8_cryptolocker
Size

48KB
Sample

241003-cyzaeszfjk
MD5

565561359777ab107ddfeb78dbbc79e8
SHA1

fb022a19f857d56db1a598177393f0a732aa9ff4
SHA256

3d231474c4a82bcf1f63146efa9b6964907bf4a167ff088f44e9784f9ead0d1a
SHA512

beaff36cbf832d73f67a6ee53a1583a56d99e5bba50e6a5d074abb4bbd4cede38e888779bfe5ffe5de370acf5de4772cace5a9d48dbdf5a2162ebab91c9a1aa9
SSDEEP

768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Z5/:79mqyNhQMOtEvwDpjBzckqX/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-03_565561359777ab107ddfeb78dbbc79e8_cryptolocker
- Size
  
  48KB
- MD5
  
  565561359777ab107ddfeb78dbbc79e8
- SHA1
  
  fb022a19f857d56db1a598177393f0a732aa9ff4
- SHA256
  
  3d231474c4a82bcf1f63146efa9b6964907bf4a167ff088f44e9784f9ead0d1a
- SHA512
  
  beaff36cbf832d73f67a6ee53a1583a56d99e5bba50e6a5d074abb4bbd4cede38e888779bfe5ffe5de370acf5de4772cace5a9d48dbdf5a2162ebab91c9a1aa9
- SSDEEP
  
  768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Z5/:79mqyNhQMOtEvwDpjBzckqX/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2