933b3e200552d8a3bebb45fa36a9fdb58b10c78f5b3864bff1a01b1cf33bd338 | Triage

Sharing

General

Target

2024-11-21_b79808f414c9a24bc077c46a8d89b9f7_cryptolocker
Size

38KB
Sample

241121-ep2ejatjdj
MD5

b79808f414c9a24bc077c46a8d89b9f7
SHA1

16caee7e19c5937b23cfe26fc426723facf3714d
SHA256

933b3e200552d8a3bebb45fa36a9fdb58b10c78f5b3864bff1a01b1cf33bd338
SHA512

11d6eb214cd5089bfa291e9f73d6c9c986d1f7fb375adac135122e033231ad6865e244effc04f279d35b90bc04d9ddc9fe89cabed266503136c327c103607937
SSDEEP

768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDZFD:bAvJCF+RQgJeab4sbj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_b79808f414c9a24bc077c46a8d89b9f7_cryptolocker
- Size
  
  38KB
- MD5
  
  b79808f414c9a24bc077c46a8d89b9f7
- SHA1
  
  16caee7e19c5937b23cfe26fc426723facf3714d
- SHA256
  
  933b3e200552d8a3bebb45fa36a9fdb58b10c78f5b3864bff1a01b1cf33bd338
- SHA512
  
  11d6eb214cd5089bfa291e9f73d6c9c986d1f7fb375adac135122e033231ad6865e244effc04f279d35b90bc04d9ddc9fe89cabed266503136c327c103607937
- SSDEEP
  
  768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDZFD:bAvJCF+RQgJeab4sbj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2