229893dd6158dd36e1671e9143aa4a5810b2f93aa01ea0de2dc40647e61d195f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-08_6de8fd8222a357db09e0cc0f62e141fd_cryptolocker_JC.exe
Size

60KB
Sample

231031-s2sj2sce53
MD5

6de8fd8222a357db09e0cc0f62e141fd
SHA1

6ae60d152310a79b12db34ada3ebb6899324d42d
SHA256

229893dd6158dd36e1671e9143aa4a5810b2f93aa01ea0de2dc40647e61d195f
SHA512

072b81c3721ff7cd50037c1319fb54e1b6fe6341ea417b848afb6ebf24d713ffae4df8095e2455c5b9559e0cd86936cdd8dbb8c5338a5b4f94f7d3e6ca312ca5
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29x:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7T

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-08_6de8fd8222a357db09e0cc0f62e141fd_cryptolocker_JC.exe
- Size
  
  60KB
- MD5
  
  6de8fd8222a357db09e0cc0f62e141fd
- SHA1
  
  6ae60d152310a79b12db34ada3ebb6899324d42d
- SHA256
  
  229893dd6158dd36e1671e9143aa4a5810b2f93aa01ea0de2dc40647e61d195f
- SHA512
  
  072b81c3721ff7cd50037c1319fb54e1b6fe6341ea417b848afb6ebf24d713ffae4df8095e2455c5b9559e0cd86936cdd8dbb8c5338a5b4f94f7d3e6ca312ca5
- SSDEEP
  
  1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29x:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7T
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2