e47b8740904e9583137a0ad4fd922639d24ada1412df70dd1f7a45513be8744b | Triage

Sharing

General

Target

2023-08-22_a94c942d4a76c2c3ada89f1b7e8b3a8c_cryptolocker_JC.exe
Size

59KB
Sample

230903-nkd8wahe4x
MD5

a94c942d4a76c2c3ada89f1b7e8b3a8c
SHA1

c1a82efbbfa6f138ed74a1d5047665a151cfbc95
SHA256

e47b8740904e9583137a0ad4fd922639d24ada1412df70dd1f7a45513be8744b
SHA512

202c18b6f7f2ce84c6fe5a7f7e49a3d117ccd1150225ce10da1312a964472ab11c8df20fc681a1d12c6bf38c314795ff7ef2a59a0190d28c23447477f3ed8944
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29B:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7j

Score

7^/10

Malware Config

Targets

- Target
  
  2023-08-22_a94c942d4a76c2c3ada89f1b7e8b3a8c_cryptolocker_JC.exe
- Size
  
  59KB
- MD5
  
  a94c942d4a76c2c3ada89f1b7e8b3a8c
- SHA1
  
  c1a82efbbfa6f138ed74a1d5047665a151cfbc95
- SHA256
  
  e47b8740904e9583137a0ad4fd922639d24ada1412df70dd1f7a45513be8744b
- SHA512
  
  202c18b6f7f2ce84c6fe5a7f7e49a3d117ccd1150225ce10da1312a964472ab11c8df20fc681a1d12c6bf38c314795ff7ef2a59a0190d28c23447477f3ed8944
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29B:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7j
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2