882da403f4749874231e1df19bfa4dca8dc143f98591b05356f0803866cb6b8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-08_95b61dd15e8af91a880e03f57495f87f_cryptolocker_JC.exe
Size

59KB
Sample

231021-zffrpabf79
MD5

95b61dd15e8af91a880e03f57495f87f
SHA1

4dfc44dcf762862516a17b53ec6ac957c12daaf7
SHA256

882da403f4749874231e1df19bfa4dca8dc143f98591b05356f0803866cb6b8d
SHA512

1f89a8761e61a9e9759887e39bac6b26c516b899fbdb0c51e4843fde75a59730ec13735ec0889b48061d3dcecd028acd8e29d0217c6d245645a12987827a3590
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEI:6j+1NMOtEvwDpjr8ox8UDEI

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-08_95b61dd15e8af91a880e03f57495f87f_cryptolocker_JC.exe
- Size
  
  59KB
- MD5
  
  95b61dd15e8af91a880e03f57495f87f
- SHA1
  
  4dfc44dcf762862516a17b53ec6ac957c12daaf7
- SHA256
  
  882da403f4749874231e1df19bfa4dca8dc143f98591b05356f0803866cb6b8d
- SHA512
  
  1f89a8761e61a9e9759887e39bac6b26c516b899fbdb0c51e4843fde75a59730ec13735ec0889b48061d3dcecd028acd8e29d0217c6d245645a12987827a3590
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEI:6j+1NMOtEvwDpjr8ox8UDEI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2