c349c9d047567cdbc8b885b2a59ad76e51c9bc7d3691406aa07940265c8bffd5 | Triage

Sharing

General

Target

2024-10-14_02536bd081f7b8b589f92e75257440e0_cryptolocker
Size

74KB
Sample

241014-brgalavcph
MD5

02536bd081f7b8b589f92e75257440e0
SHA1

83f30a5dd2588b87df15d0fd3b97a80b23c48986
SHA256

c349c9d047567cdbc8b885b2a59ad76e51c9bc7d3691406aa07940265c8bffd5
SHA512

e503d16a26294239555020afce0617474c825c179498d3baec4cd4966f911636510bb7cd81bc0037594d4a1bb8f778fb2e1adf85470df266fdd38b55514dee94
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfVtl:vCjsIOtEvwDpj5H9YvQd2d

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_02536bd081f7b8b589f92e75257440e0_cryptolocker
- Size
  
  74KB
- MD5
  
  02536bd081f7b8b589f92e75257440e0
- SHA1
  
  83f30a5dd2588b87df15d0fd3b97a80b23c48986
- SHA256
  
  c349c9d047567cdbc8b885b2a59ad76e51c9bc7d3691406aa07940265c8bffd5
- SHA512
  
  e503d16a26294239555020afce0617474c825c179498d3baec4cd4966f911636510bb7cd81bc0037594d4a1bb8f778fb2e1adf85470df266fdd38b55514dee94
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfVtl:vCjsIOtEvwDpj5H9YvQd2d
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2