b7c98108dd5757afac7989f526d35ab27f95c1f4954a7148b3c403f75438a816 | Triage

Sharing

General

Target

2024-10-04_3b929f0eb86b80007b21e0e34cbbe41c_cryptolocker
Size

47KB
Sample

241004-d1ngdasarr
MD5

3b929f0eb86b80007b21e0e34cbbe41c
SHA1

5e9e9fe5662cf8480380850cc441f30390e3ac19
SHA256

b7c98108dd5757afac7989f526d35ab27f95c1f4954a7148b3c403f75438a816
SHA512

8313ed50be458b53dcd6aa0c8b8f89c7c90e86d520a4c7a663197098720356b4b207b5dbf3d300626e9dbad32683401fe2b8bff3c4ac8bc81c41d97531dccffa
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXP:V6QFElP6n+gMQMOtEvwDpjyaHaXrP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-04_3b929f0eb86b80007b21e0e34cbbe41c_cryptolocker
- Size
  
  47KB
- MD5
  
  3b929f0eb86b80007b21e0e34cbbe41c
- SHA1
  
  5e9e9fe5662cf8480380850cc441f30390e3ac19
- SHA256
  
  b7c98108dd5757afac7989f526d35ab27f95c1f4954a7148b3c403f75438a816
- SHA512
  
  8313ed50be458b53dcd6aa0c8b8f89c7c90e86d520a4c7a663197098720356b4b207b5dbf3d300626e9dbad32683401fe2b8bff3c4ac8bc81c41d97531dccffa
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3dXP:V6QFElP6n+gMQMOtEvwDpjyaHaXrP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2