34f44a33655e34547a200c0f545e2840b37cb1ca102ffb6c6dd576d7a4574a8f | Triage

Sharing

General

Target

2024-11-19_bba1ab42aa2b218515fe531099038345_cryptolocker
Size

74KB
Sample

241119-qxv39swfpc
MD5

bba1ab42aa2b218515fe531099038345
SHA1

b32136086daf8fecda89fe986cea83cdd2eb4cf8
SHA256

34f44a33655e34547a200c0f545e2840b37cb1ca102ffb6c6dd576d7a4574a8f
SHA512

96ed9cb3649bc43ca1d862538478cc93473f7b5d5ea56f9e1a2e811c672efeb6930f90ae39b388a67700ad8f876550b67b90728ae14572f7d4cc8345bad4260a
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RV:vj+jsMQMOtEvwDpj5HZYTjipvF24d

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-19_bba1ab42aa2b218515fe531099038345_cryptolocker
- Size
  
  74KB
- MD5
  
  bba1ab42aa2b218515fe531099038345
- SHA1
  
  b32136086daf8fecda89fe986cea83cdd2eb4cf8
- SHA256
  
  34f44a33655e34547a200c0f545e2840b37cb1ca102ffb6c6dd576d7a4574a8f
- SHA512
  
  96ed9cb3649bc43ca1d862538478cc93473f7b5d5ea56f9e1a2e811c672efeb6930f90ae39b388a67700ad8f876550b67b90728ae14572f7d4cc8345bad4260a
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/RV:vj+jsMQMOtEvwDpj5HZYTjipvF24d
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2