5942488726f7b61676fd8f0f33ec735de78ec7cd6b63d9264d627a38520dda7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-06_77cf0f76a146e410d3486300b24fa2f1_cryptolocker_JC.exe
Size

56KB
Sample

231023-zlzfzshc28
MD5

77cf0f76a146e410d3486300b24fa2f1
SHA1

fd64cb639cfc16d28d7586014e55699687f745c8
SHA256

5942488726f7b61676fd8f0f33ec735de78ec7cd6b63d9264d627a38520dda7c
SHA512

f3df4e783254f8ec73bc88248cfd96c1643c81985eb789d4fbbbbd5337fcb79d5a895e0eb524875433744c8c9e3a177894a87a100e8201ba8014b159504d7c1e
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSb5:BbdDmjr+OtEvwDpjM8d

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-06_77cf0f76a146e410d3486300b24fa2f1_cryptolocker_JC.exe
- Size
  
  56KB
- MD5
  
  77cf0f76a146e410d3486300b24fa2f1
- SHA1
  
  fd64cb639cfc16d28d7586014e55699687f745c8
- SHA256
  
  5942488726f7b61676fd8f0f33ec735de78ec7cd6b63d9264d627a38520dda7c
- SHA512
  
  f3df4e783254f8ec73bc88248cfd96c1643c81985eb789d4fbbbbd5337fcb79d5a895e0eb524875433744c8c9e3a177894a87a100e8201ba8014b159504d7c1e
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSb5:BbdDmjr+OtEvwDpjM8d
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2