a9f366e21f8448cfbb7966d60056be7cb8422859d6c009924b80e350d66fc307 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-05_e6fb98a779fb2421f6e4acdf8ff9a6f1_cryptolocker_JC.exe
Size

89KB
Sample

231022-jsl68sed4w
MD5

e6fb98a779fb2421f6e4acdf8ff9a6f1
SHA1

2dfdfc8c264f24ed166d0f39440fc9846f8ac2da
SHA256

a9f366e21f8448cfbb7966d60056be7cb8422859d6c009924b80e350d66fc307
SHA512

12d3af278db1ef2439f7bf0a55eb35f6975d699657f06688bc71fba64de7a16bb9c92d46a8e5759d70e496f1c72b27e1876f79b20fb320e11565226d53277b65
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWHShl/3S0:V6a+pOtEvwDpjt9

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-05_e6fb98a779fb2421f6e4acdf8ff9a6f1_cryptolocker_JC.exe
- Size
  
  89KB
- MD5
  
  e6fb98a779fb2421f6e4acdf8ff9a6f1
- SHA1
  
  2dfdfc8c264f24ed166d0f39440fc9846f8ac2da
- SHA256
  
  a9f366e21f8448cfbb7966d60056be7cb8422859d6c009924b80e350d66fc307
- SHA512
  
  12d3af278db1ef2439f7bf0a55eb35f6975d699657f06688bc71fba64de7a16bb9c92d46a8e5759d70e496f1c72b27e1876f79b20fb320e11565226d53277b65
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWHShl/3S0:V6a+pOtEvwDpjt9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2