578fa50d9047d49373a3c0041a8e2e32ebc864359dd1407abcb34b5f7fea5c7f | Triage

Sharing

General

Target

2024-11-20_a3f2a109d9059ce0a1999cbf2433fa6d_cryptolocker
Size

25KB
Sample

241120-dbne3stnel
MD5

a3f2a109d9059ce0a1999cbf2433fa6d
SHA1

258a94602ce9a53ecc2a155f6cf7b66119465614
SHA256

578fa50d9047d49373a3c0041a8e2e32ebc864359dd1407abcb34b5f7fea5c7f
SHA512

5f5862ee157b2b1f73c5b07f29c67af8ee345ca02da41211eaf302cc23b524e6d362fe540636fa937c2a7bcfb02a48408db33f30593129162585a5b8944f191c
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/P4QtOOtEvwDpjV:ZzFbxmLP4QMOtEvwDpjV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-20_a3f2a109d9059ce0a1999cbf2433fa6d_cryptolocker
- Size
  
  25KB
- MD5
  
  a3f2a109d9059ce0a1999cbf2433fa6d
- SHA1
  
  258a94602ce9a53ecc2a155f6cf7b66119465614
- SHA256
  
  578fa50d9047d49373a3c0041a8e2e32ebc864359dd1407abcb34b5f7fea5c7f
- SHA512
  
  5f5862ee157b2b1f73c5b07f29c67af8ee345ca02da41211eaf302cc23b524e6d362fe540636fa937c2a7bcfb02a48408db33f30593129162585a5b8944f191c
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/P4QtOOtEvwDpjV:ZzFbxmLP4QMOtEvwDpjV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2