df2a335452d0f3338ada8970fb84b3889b438c5ba0823c5ba5c578a1464f5101 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-08_f67679f4296a21462c69203dcc081355_cryptolocker_JC.exe
Size

40KB
Sample

231021-zpvxzaac2y
MD5

f67679f4296a21462c69203dcc081355
SHA1

40861f7e3dfd93a218542e9a2cba4c0044370284
SHA256

df2a335452d0f3338ada8970fb84b3889b438c5ba0823c5ba5c578a1464f5101
SHA512

e06ca12b9724432454bfb4ffe0da7d2a5df94c9b721fe152fa0e048d94e28eba8e40c06cb25fd48b3fd18cb3af48157b849bec4b2ba2a26e84ead6b866aa0121
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxU:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xl

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-08_f67679f4296a21462c69203dcc081355_cryptolocker_JC.exe
- Size
  
  40KB
- MD5
  
  f67679f4296a21462c69203dcc081355
- SHA1
  
  40861f7e3dfd93a218542e9a2cba4c0044370284
- SHA256
  
  df2a335452d0f3338ada8970fb84b3889b438c5ba0823c5ba5c578a1464f5101
- SHA512
  
  e06ca12b9724432454bfb4ffe0da7d2a5df94c9b721fe152fa0e048d94e28eba8e40c06cb25fd48b3fd18cb3af48157b849bec4b2ba2a26e84ead6b866aa0121
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxU:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xl
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2