46def830f8eddcc6e451efa3938a7bcc769851bc4a6760ef765fa621b4a4ddf4 | Triage

Sharing

General

Target

2023-08-26_d08dd99ebb5f94e0a48c6d908b5c6f42_cryptolocker_JC.exe
Size

32KB
Sample

231011-f4f8ksbg2t
MD5

d08dd99ebb5f94e0a48c6d908b5c6f42
SHA1

d11cae9814506f7a7fcc4a79405fe9bc69ea6961
SHA256

46def830f8eddcc6e451efa3938a7bcc769851bc4a6760ef765fa621b4a4ddf4
SHA512

f20f6c538e21ffb25d034749727bf699b3ac76c52fc2921f8736760659cc98afe53852a5264db7885d9999ad3ad098eef1425f6a72d5da2c473a96bfc423606e
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBjb1iIJSL:X6QFElP6n+gJQMOtEvwDpjBngHL

Score

7^/10

Malware Config

Targets

- Target
  
  2023-08-26_d08dd99ebb5f94e0a48c6d908b5c6f42_cryptolocker_JC.exe
- Size
  
  32KB
- MD5
  
  d08dd99ebb5f94e0a48c6d908b5c6f42
- SHA1
  
  d11cae9814506f7a7fcc4a79405fe9bc69ea6961
- SHA256
  
  46def830f8eddcc6e451efa3938a7bcc769851bc4a6760ef765fa621b4a4ddf4
- SHA512
  
  f20f6c538e21ffb25d034749727bf699b3ac76c52fc2921f8736760659cc98afe53852a5264db7885d9999ad3ad098eef1425f6a72d5da2c473a96bfc423606e
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBjb1iIJSL:X6QFElP6n+gJQMOtEvwDpjBngHL
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2