900b81f2dcac460be71dbd3014b792905b8c36afcf6f163b839f03daee5a4962 | Triage

Sharing

General

Target

2025-03-21_cad3df149852706b1e323dfd5479aa5e_cryptolocker
Size

52KB
Sample

250321-jyxvxsyqy8
MD5

cad3df149852706b1e323dfd5479aa5e
SHA1

d23168ec1c5a776eba015e989e75feb794ade589
SHA256

900b81f2dcac460be71dbd3014b792905b8c36afcf6f163b839f03daee5a4962
SHA512

30b5cbeb28603587da140f3aca7a93b9c0bb6cb1eb5effd96c83dcfc1729a3bfa345d6b6ea4f76ce282cfcf3f86acbc4818dc10ef8828da9ad04152564300403
SSDEEP

768:b7o/2n1TCraU6GD1oVzX0WcO+wMVm+slAMvcWsUavRwz8l7lKK:bc/y2ikF0+B2qK8PKK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2025-03-21_cad3df149852706b1e323dfd5479aa5e_cryptolocker
- Size
  
  52KB
- MD5
  
  cad3df149852706b1e323dfd5479aa5e
- SHA1
  
  d23168ec1c5a776eba015e989e75feb794ade589
- SHA256
  
  900b81f2dcac460be71dbd3014b792905b8c36afcf6f163b839f03daee5a4962
- SHA512
  
  30b5cbeb28603587da140f3aca7a93b9c0bb6cb1eb5effd96c83dcfc1729a3bfa345d6b6ea4f76ce282cfcf3f86acbc4818dc10ef8828da9ad04152564300403
- SSDEEP
  
  768:b7o/2n1TCraU6GD1oVzX0WcO+wMVm+slAMvcWsUavRwz8l7lKK:bc/y2ikF0+B2qK8PKK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2