37b149682386bb9a88bbf0547740b5e9ab960564861e06c945a5f869be3b2566 | Triage

Sharing

General

Target

2024-11-21_17c93a561d9f8f8c5674d46b6674ae59_cryptolocker
Size

55KB
Sample

241121-mg3xds1bjf
MD5

17c93a561d9f8f8c5674d46b6674ae59
SHA1

e8500c1bf7a517feb30d434c0b11a8ae9ce443d9
SHA256

37b149682386bb9a88bbf0547740b5e9ab960564861e06c945a5f869be3b2566
SHA512

7e59dd0f1735198c39fa7981d549308cc8b01264c5221952227bea6545b6b8e06e1e28d483f02eb453f9e7a7ea1537fae1ac51845c87efbf5dc865e03c73d73f
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIZ:X6QFElP6n+gJBMOtEvwDpjBtExmle

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_17c93a561d9f8f8c5674d46b6674ae59_cryptolocker
- Size
  
  55KB
- MD5
  
  17c93a561d9f8f8c5674d46b6674ae59
- SHA1
  
  e8500c1bf7a517feb30d434c0b11a8ae9ce443d9
- SHA256
  
  37b149682386bb9a88bbf0547740b5e9ab960564861e06c945a5f869be3b2566
- SHA512
  
  7e59dd0f1735198c39fa7981d549308cc8b01264c5221952227bea6545b6b8e06e1e28d483f02eb453f9e7a7ea1537fae1ac51845c87efbf5dc865e03c73d73f
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIZ:X6QFElP6n+gJBMOtEvwDpjBtExmle
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2