a6f254c88ed96b6b9ed51d7446af637e59ce98ca1b73c44fa1c1084c8ba800f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-08_f85ddecddd717424206f6d058d7c479d_cryptolocker_JC.exe
Size

54KB
Sample

231023-yhrfjaea71
MD5

f85ddecddd717424206f6d058d7c479d
SHA1

4124559dd872847b8e354e0c292c1a00a5a5cb5f
SHA256

a6f254c88ed96b6b9ed51d7446af637e59ce98ca1b73c44fa1c1084c8ba800f4
SHA512

45ac5b44394b4f6fd2105a7f84a3b595d90a52d0614484ca412af1fefbb3f172cfa26470767a89663109f397288e05df72acf267d32606b885e507a4a6ba182b
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20U:xj+VGMOtEvwDpjubEgV20U

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-08_f85ddecddd717424206f6d058d7c479d_cryptolocker_JC.exe
- Size
  
  54KB
- MD5
  
  f85ddecddd717424206f6d058d7c479d
- SHA1
  
  4124559dd872847b8e354e0c292c1a00a5a5cb5f
- SHA256
  
  a6f254c88ed96b6b9ed51d7446af637e59ce98ca1b73c44fa1c1084c8ba800f4
- SHA512
  
  45ac5b44394b4f6fd2105a7f84a3b595d90a52d0614484ca412af1fefbb3f172cfa26470767a89663109f397288e05df72acf267d32606b885e507a4a6ba182b
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20U:xj+VGMOtEvwDpjubEgV20U
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2