4f4f57ae8af25911d09b904cd4e66222e3ce09ac79fb5c9e91a7e62bd2dd1721 | Triage

Sharing

General

Target

2024-10-10_3b2261035c4e3e075f91d8eca15ef2ef_cryptolocker
Size

51KB
Sample

241010-f8vlrsthmj
MD5

3b2261035c4e3e075f91d8eca15ef2ef
SHA1

9bb080e09f2f9d0d5e1981640b06df165f232952
SHA256

4f4f57ae8af25911d09b904cd4e66222e3ce09ac79fb5c9e91a7e62bd2dd1721
SHA512

f9dc0f3ecb0aa202ee327893ea02af86b51366b64b7bdf0f13475d1a7cf1eea28cec669f895bb3a97cbbba6063097c5e4f88eb8355cace4c0d616d946df86748
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoG:xj+VGMOtEvwDpjubEgf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_3b2261035c4e3e075f91d8eca15ef2ef_cryptolocker
- Size
  
  51KB
- MD5
  
  3b2261035c4e3e075f91d8eca15ef2ef
- SHA1
  
  9bb080e09f2f9d0d5e1981640b06df165f232952
- SHA256
  
  4f4f57ae8af25911d09b904cd4e66222e3ce09ac79fb5c9e91a7e62bd2dd1721
- SHA512
  
  f9dc0f3ecb0aa202ee327893ea02af86b51366b64b7bdf0f13475d1a7cf1eea28cec669f895bb3a97cbbba6063097c5e4f88eb8355cace4c0d616d946df86748
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoG:xj+VGMOtEvwDpjubEgf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2