5a8070f6df31ce40b7e73c3d4ce7f58b753cec82eff32db8e89151dd59c541d3 | Triage

Sharing

General

Target

NEAS.2023-09-05_68081183dea2f65059caa2923f0b37e5_cryptolocker_JC.exe
Size

40KB
Sample

231023-x1v11add7z
MD5

68081183dea2f65059caa2923f0b37e5
SHA1

58be0ae4f8cc54ce52050d7e87e132d7c9e778e1
SHA256

5a8070f6df31ce40b7e73c3d4ce7f58b753cec82eff32db8e89151dd59c541d3
SHA512

b87af260b62db9c106769979f908e522749176d38472ecb3fd8b9cfc2b8130263cb731aaca46561e4e4e7d62e18f17bbd2d242b41c9ffd53e7982e421b47ea1e
SSDEEP

768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YR8C:bgGYcA/53GAA6y37UH

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-05_68081183dea2f65059caa2923f0b37e5_cryptolocker_JC.exe
- Size
  
  40KB
- MD5
  
  68081183dea2f65059caa2923f0b37e5
- SHA1
  
  58be0ae4f8cc54ce52050d7e87e132d7c9e778e1
- SHA256
  
  5a8070f6df31ce40b7e73c3d4ce7f58b753cec82eff32db8e89151dd59c541d3
- SHA512
  
  b87af260b62db9c106769979f908e522749176d38472ecb3fd8b9cfc2b8130263cb731aaca46561e4e4e7d62e18f17bbd2d242b41c9ffd53e7982e421b47ea1e
- SSDEEP
  
  768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YR8C:bgGYcA/53GAA6y37UH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2