d2452a8b91009cbfc1947ef64cb9f7628cc7bb01900c1f3feb66c08b8492cb73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6aaad6a946ca08e380bb45f336c4a64_cryptolocker_JC.exe
Size

97KB
Sample

230830-v9gtmage7t
MD5

e6aaad6a946ca08e380bb45f336c4a64
SHA1

b0f660d4aba823ea5870b0d850aea5aa139f37be
SHA256

d2452a8b91009cbfc1947ef64cb9f7628cc7bb01900c1f3feb66c08b8492cb73
SHA512

3a8b017aa98076fc117d731ebb5e8cc216988c5af1513277115db1f8ee25e5512b664596b294cb2796e3f911d73cccf315999a9b0a103806cf8d6b06434b6bf5
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgb8:V6a+pOtEvwDpjtzV

Score

7^/10

Malware Config

Targets

- Target
  
  e6aaad6a946ca08e380bb45f336c4a64_cryptolocker_JC.exe
- Size
  
  97KB
- MD5
  
  e6aaad6a946ca08e380bb45f336c4a64
- SHA1
  
  b0f660d4aba823ea5870b0d850aea5aa139f37be
- SHA256
  
  d2452a8b91009cbfc1947ef64cb9f7628cc7bb01900c1f3feb66c08b8492cb73
- SHA512
  
  3a8b017aa98076fc117d731ebb5e8cc216988c5af1513277115db1f8ee25e5512b664596b294cb2796e3f911d73cccf315999a9b0a103806cf8d6b06434b6bf5
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgb8:V6a+pOtEvwDpjtzV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2