326144d608c2bcbe3488cbb635332ed6ee419c5fbd2ab06d565d5cc6aa7c88ad | Triage

Sharing

General

Target

2024-10-31_5f275dd72ba777cd5fca170f2ad5cb79_cryptolocker
Size

34KB
Sample

241031-kbxr3svcqf
MD5

5f275dd72ba777cd5fca170f2ad5cb79
SHA1

03b369d204e15c4ba4c1fb0a49eb173086fd65e5
SHA256

326144d608c2bcbe3488cbb635332ed6ee419c5fbd2ab06d565d5cc6aa7c88ad
SHA512

0e70a5717e13d262497cfb5d631bb0f81667e1d5a2384c1e49010d69c4de65e8e3c9688daa3ab47084fc28bc3ace20e98a0f5168bdbfd9a2954101bfa600069d
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B4lWS+gp:btB9g/WItCSsAGjX7r3B4GM

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-31_5f275dd72ba777cd5fca170f2ad5cb79_cryptolocker
- Size
  
  34KB
- MD5
  
  5f275dd72ba777cd5fca170f2ad5cb79
- SHA1
  
  03b369d204e15c4ba4c1fb0a49eb173086fd65e5
- SHA256
  
  326144d608c2bcbe3488cbb635332ed6ee419c5fbd2ab06d565d5cc6aa7c88ad
- SHA512
  
  0e70a5717e13d262497cfb5d631bb0f81667e1d5a2384c1e49010d69c4de65e8e3c9688daa3ab47084fc28bc3ace20e98a0f5168bdbfd9a2954101bfa600069d
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B4lWS+gp:btB9g/WItCSsAGjX7r3B4GM
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2