7728e97bfce305d133e63a9ba7a3d2df28e6ba0338e7aeb7ad0f1ac4731ada5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-05_afc556ce4494e85102c656b7ce66c7fd_cryptolocker_JC.exe
Size

44KB
Sample

231031-v6gpfsbg9s
MD5

afc556ce4494e85102c656b7ce66c7fd
SHA1

e061ea505ac49cbb65d2cbce1f29173b1a8cb7f6
SHA256

7728e97bfce305d133e63a9ba7a3d2df28e6ba0338e7aeb7ad0f1ac4731ada5c
SHA512

3a6a893191fcccebf1c5b616f357c6430ff87afb2c4385c92f4b493f74d226b826f4cf50b5f7f5c3af45852eb07c1e57cc19f93ba068a31b69e4975357a9dc49
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtld5:xj+VGMOtEvwDpjk/5

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-05_afc556ce4494e85102c656b7ce66c7fd_cryptolocker_JC.exe
- Size
  
  44KB
- MD5
  
  afc556ce4494e85102c656b7ce66c7fd
- SHA1
  
  e061ea505ac49cbb65d2cbce1f29173b1a8cb7f6
- SHA256
  
  7728e97bfce305d133e63a9ba7a3d2df28e6ba0338e7aeb7ad0f1ac4731ada5c
- SHA512
  
  3a6a893191fcccebf1c5b616f357c6430ff87afb2c4385c92f4b493f74d226b826f4cf50b5f7f5c3af45852eb07c1e57cc19f93ba068a31b69e4975357a9dc49
- SSDEEP
  
  768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtld5:xj+VGMOtEvwDpjk/5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2