a3efcc2520e2612563c5349234edf7cebd9d89d371af25f6be9d0ba3ea7a6638 | Triage

Sharing

General

Target

2024-10-18_13f76338924baca5a52ea8ddc53ae116_cryptolocker
Size

33KB
Sample

241018-ezqqsaxbjc
MD5

13f76338924baca5a52ea8ddc53ae116
SHA1

a61145dc1b9f7f38c1973659f30338729f693b47
SHA256

a3efcc2520e2612563c5349234edf7cebd9d89d371af25f6be9d0ba3ea7a6638
SHA512

8d8591acfa7579ba5a188b04a2e69380eb432e839eeb1cd76fd17dafc56c9848d5e5a047765247eb2d9ca583128780a8f3299f03abdb1ee324f64920c245aea2
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNQJMb:btB9g/WItCSsAGjX7e9NQK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_13f76338924baca5a52ea8ddc53ae116_cryptolocker
- Size
  
  33KB
- MD5
  
  13f76338924baca5a52ea8ddc53ae116
- SHA1
  
  a61145dc1b9f7f38c1973659f30338729f693b47
- SHA256
  
  a3efcc2520e2612563c5349234edf7cebd9d89d371af25f6be9d0ba3ea7a6638
- SHA512
  
  8d8591acfa7579ba5a188b04a2e69380eb432e839eeb1cd76fd17dafc56c9848d5e5a047765247eb2d9ca583128780a8f3299f03abdb1ee324f64920c245aea2
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNQJMb:btB9g/WItCSsAGjX7e9NQK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2