9bfb508e22b5da0bf7c6663eecc33ee3821186d7d099af486afb148ec7c8f78d | Triage

Sharing

General

Target

2024-11-02_bdfd5a3618383d6abf7368f9c068ab0c_cryptolocker
Size

49KB
Sample

241102-g7w9msykdz
MD5

bdfd5a3618383d6abf7368f9c068ab0c
SHA1

0b5c37ce90ac5e8777ca8f597a6272ef3afe2d67
SHA256

9bfb508e22b5da0bf7c6663eecc33ee3821186d7d099af486afb148ec7c8f78d
SHA512

958d208be6b5ee1d714bd312d49c13325eb429ddbf5a5bd55bc19db13f42ed5eb6e1a8f066d3445959aa836fca024866717e03c7fe895b4ba86b3e6305180442
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatr7:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-02_bdfd5a3618383d6abf7368f9c068ab0c_cryptolocker
- Size
  
  49KB
- MD5
  
  bdfd5a3618383d6abf7368f9c068ab0c
- SHA1
  
  0b5c37ce90ac5e8777ca8f597a6272ef3afe2d67
- SHA256
  
  9bfb508e22b5da0bf7c6663eecc33ee3821186d7d099af486afb148ec7c8f78d
- SHA512
  
  958d208be6b5ee1d714bd312d49c13325eb429ddbf5a5bd55bc19db13f42ed5eb6e1a8f066d3445959aa836fca024866717e03c7fe895b4ba86b3e6305180442
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatr7:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2