b453c5e31728901dfdef49778454bc98b0838d361d2663059d7b0220881021e6 | Triage

Sharing

General

Target

2024-10-10_3970d1e8eec5944752b1ee6f487db3d0_cryptolocker
Size

84KB
Sample

241010-falk7stanl
MD5

3970d1e8eec5944752b1ee6f487db3d0
SHA1

3210a827d2872faa19993f40c518d2a6df12cc36
SHA256

b453c5e31728901dfdef49778454bc98b0838d361d2663059d7b0220881021e6
SHA512

394f1fbd99ae3c4b5333fc62c2a394327f5ac95c2d04550ded411b69efc2d2f42458f8d1ba5f562393d917fc196e9101f289f7852300b9bfe0147a55af4448b1
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxk:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8zL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-10_3970d1e8eec5944752b1ee6f487db3d0_cryptolocker
- Size
  
  84KB
- MD5
  
  3970d1e8eec5944752b1ee6f487db3d0
- SHA1
  
  3210a827d2872faa19993f40c518d2a6df12cc36
- SHA256
  
  b453c5e31728901dfdef49778454bc98b0838d361d2663059d7b0220881021e6
- SHA512
  
  394f1fbd99ae3c4b5333fc62c2a394327f5ac95c2d04550ded411b69efc2d2f42458f8d1ba5f562393d917fc196e9101f289f7852300b9bfe0147a55af4448b1
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxk:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8zL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2