53db8807f2a0c1be2c28862a3768ae44e8d245e9b76219034f19f046453bb1ae | Triage

Sharing

General

Target

2024-10-14_c9011fe90cc3d0ec734e209a227d139c_cryptolocker
Size

32KB
Sample

241014-jb5l9awfpq
MD5

c9011fe90cc3d0ec734e209a227d139c
SHA1

20a3b5dca412fca3e3253a9f6b9d3b4a5ed11198
SHA256

53db8807f2a0c1be2c28862a3768ae44e8d245e9b76219034f19f046453bb1ae
SHA512

3dabb93d16d7d7c7c0e7879d3c2f35f976468ceed72a2da5343609fb6779c710c81453922c306b79cabf190e603d572943c14f26de28461413235842f2c3590b
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzimQV:b/yC4GyNM01GuQMNXw2PSjHeH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-14_c9011fe90cc3d0ec734e209a227d139c_cryptolocker
- Size
  
  32KB
- MD5
  
  c9011fe90cc3d0ec734e209a227d139c
- SHA1
  
  20a3b5dca412fca3e3253a9f6b9d3b4a5ed11198
- SHA256
  
  53db8807f2a0c1be2c28862a3768ae44e8d245e9b76219034f19f046453bb1ae
- SHA512
  
  3dabb93d16d7d7c7c0e7879d3c2f35f976468ceed72a2da5343609fb6779c710c81453922c306b79cabf190e603d572943c14f26de28461413235842f2c3590b
- SSDEEP
  
  384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzimQV:b/yC4GyNM01GuQMNXw2PSjHeH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2