b51a8db7a42c2c196d0bcfb4edc891066c6d74af56f25f17201f821c5a43c962 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe
Size

44KB
Sample

231031-t835ssbc4w
MD5

4d5dbc57da80d81d6795dc859029a091
SHA1

878e1ff5b6777ab2ccd6678d60f3f9ae9db3d6f3
SHA256

b51a8db7a42c2c196d0bcfb4edc891066c6d74af56f25f17201f821c5a43c962
SHA512

6d941069d7f8961bab8e0863a42ab113db5baa9f0cd70b8e62468e54fb740ad1cfc6385070f0f8bf1f53aa294c658a0aff1d08173ef25281c686f4eb008a1da7
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldv:xj+VGMOtEvwDpjk/v

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe
- Size
  
  44KB
- MD5
  
  4d5dbc57da80d81d6795dc859029a091
- SHA1
  
  878e1ff5b6777ab2ccd6678d60f3f9ae9db3d6f3
- SHA256
  
  b51a8db7a42c2c196d0bcfb4edc891066c6d74af56f25f17201f821c5a43c962
- SHA512
  
  6d941069d7f8961bab8e0863a42ab113db5baa9f0cd70b8e62468e54fb740ad1cfc6385070f0f8bf1f53aa294c658a0aff1d08173ef25281c686f4eb008a1da7
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldv:xj+VGMOtEvwDpjk/v
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2