bb5bfa8de731c83124b6d19582631b04c88263d116a74ef873ae2c83ea8500d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-05_c58b7f57067071fd363cb07cae03e31c_cryptolocker_JC.exe
Size

44KB
Sample

231023-vk3d2acg62
MD5

c58b7f57067071fd363cb07cae03e31c
SHA1

734b6c7d55e76b35b4e6b270627b1a5e17e4f9d0
SHA256

bb5bfa8de731c83124b6d19582631b04c88263d116a74ef873ae2c83ea8500d2
SHA512

8e06a188a9a9f2f499bd4afa3a28d1a1415fa2dff5c490626e6ee82171f367dc1cd23df28df0e097c642cd9ac9cf659de79c8167b4886f9a404cd9a64842ee1f
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldJQW:xj+VGMOtEvwDpjk/JQW

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-05_c58b7f57067071fd363cb07cae03e31c_cryptolocker_JC.exe
- Size
  
  44KB
- MD5
  
  c58b7f57067071fd363cb07cae03e31c
- SHA1
  
  734b6c7d55e76b35b4e6b270627b1a5e17e4f9d0
- SHA256
  
  bb5bfa8de731c83124b6d19582631b04c88263d116a74ef873ae2c83ea8500d2
- SHA512
  
  8e06a188a9a9f2f499bd4afa3a28d1a1415fa2dff5c490626e6ee82171f367dc1cd23df28df0e097c642cd9ac9cf659de79c8167b4886f9a404cd9a64842ee1f
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldJQW:xj+VGMOtEvwDpjk/JQW
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2