93da0f0855eea11fdca1e5af3ad98b08540922cbd6b290ddea7e09ae85b25ccd | Triage

Sharing

General

Target

2024-11-21_7296d71c8ac6e40810f1e0c8e398f0f7_cryptolocker
Size

52KB
Sample

241121-mq3b8a1nfz
MD5

7296d71c8ac6e40810f1e0c8e398f0f7
SHA1

8583f886faba783d8c83c8a75ca59dcb6670ca95
SHA256

93da0f0855eea11fdca1e5af3ad98b08540922cbd6b290ddea7e09ae85b25ccd
SHA512

99502bedab43192680db23c5a53c98c4ca14fb415da9fe1af64401a41f8e66fa4a920ed322bcb8de185f459654825337f14d1a84d875a5e0af80dcc7b38120b6
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0ns:vj+jsMQMOtEvwDpj5HczerLO04B/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-11-21_7296d71c8ac6e40810f1e0c8e398f0f7_cryptolocker
- Size
  
  52KB
- MD5
  
  7296d71c8ac6e40810f1e0c8e398f0f7
- SHA1
  
  8583f886faba783d8c83c8a75ca59dcb6670ca95
- SHA256
  
  93da0f0855eea11fdca1e5af3ad98b08540922cbd6b290ddea7e09ae85b25ccd
- SHA512
  
  99502bedab43192680db23c5a53c98c4ca14fb415da9fe1af64401a41f8e66fa4a920ed322bcb8de185f459654825337f14d1a84d875a5e0af80dcc7b38120b6
- SSDEEP
  
  768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0ns:vj+jsMQMOtEvwDpj5HczerLO04B/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2