2723af9b955842c78f303d51fb71f15f57723f0693d917d52fc151a20c25cabc | Triage

Sharing

General

Target

2024-10-17_3db8bf5bcbb2402f1e7f6d1957f3c344_cryptolocker
Size

84KB
Sample

241017-x5evksvdmm
MD5

3db8bf5bcbb2402f1e7f6d1957f3c344
SHA1

c8b742dfa795e226ba79c958a218e7f215f0b15a
SHA256

2723af9b955842c78f303d51fb71f15f57723f0693d917d52fc151a20c25cabc
SHA512

3b2190df2e3584582562195d147a9338d915b78001b5f8709598f1587f6fdfe032dfb1914999ae360e8a919463ad208195d7526844e3664d5df810bf48afc6ad
SSDEEP

1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1zzV:vCjsIOtEvwDpj5H8zP3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-17_3db8bf5bcbb2402f1e7f6d1957f3c344_cryptolocker
- Size
  
  84KB
- MD5
  
  3db8bf5bcbb2402f1e7f6d1957f3c344
- SHA1
  
  c8b742dfa795e226ba79c958a218e7f215f0b15a
- SHA256
  
  2723af9b955842c78f303d51fb71f15f57723f0693d917d52fc151a20c25cabc
- SHA512
  
  3b2190df2e3584582562195d147a9338d915b78001b5f8709598f1587f6fdfe032dfb1914999ae360e8a919463ad208195d7526844e3664d5df810bf48afc6ad
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1zzV:vCjsIOtEvwDpj5H8zP3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2