fd97530dbf942258bc3437f1698a3ffb1afee552f6e7cedefcce18d9d3da9910 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-06_dc32a990c79c5007f10fa334731a2caa_cryptolocker_JC.exe
Size

43KB
Sample

231031-221p4afc4x
MD5

dc32a990c79c5007f10fa334731a2caa
SHA1

4741825568f39bcb096e2a3da56ebc0638230c38
SHA256

fd97530dbf942258bc3437f1698a3ffb1afee552f6e7cedefcce18d9d3da9910
SHA512

208eafa83fe4dae712474833c92cb307fd960f4b486462d677462edf20ef94a6ed6a00e330a83a90577ca60dac2ac01358bd81c21fb12857c8794d96eb15ac39
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsG:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ10

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-06_dc32a990c79c5007f10fa334731a2caa_cryptolocker_JC.exe
- Size
  
  43KB
- MD5
  
  dc32a990c79c5007f10fa334731a2caa
- SHA1
  
  4741825568f39bcb096e2a3da56ebc0638230c38
- SHA256
  
  fd97530dbf942258bc3437f1698a3ffb1afee552f6e7cedefcce18d9d3da9910
- SHA512
  
  208eafa83fe4dae712474833c92cb307fd960f4b486462d677462edf20ef94a6ed6a00e330a83a90577ca60dac2ac01358bd81c21fb12857c8794d96eb15ac39
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsG:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ10
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2