9cc55fc0b4dfac810932c254cd1ae1fd60336cc1c3c2e7849abeede50eba82b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-27_d4463307dce1585f830942a3051b1fe5_cryptolocker.exe
Size

46KB
Sample

231106-ysdbnaeb4x
MD5

d4463307dce1585f830942a3051b1fe5
SHA1

5f374bb6c34ab4eed2b0d7fe6416ee618a0218f1
SHA256

9cc55fc0b4dfac810932c254cd1ae1fd60336cc1c3c2e7849abeede50eba82b8
SHA512

d4576298e1f9badf102d84b8a0d0c58a3416c083ec2f0c61a62e01b9b0448c5d40a888a9d72d8b8f3a9720dff7f6f612c28cbcd076b76247576ddb0e839b23d5
SSDEEP

384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/vz5n3I:XS5nQJ24LR1bytOOtEvwDpjNbP/1I

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-27_d4463307dce1585f830942a3051b1fe5_cryptolocker.exe
- Size
  
  46KB
- MD5
  
  d4463307dce1585f830942a3051b1fe5
- SHA1
  
  5f374bb6c34ab4eed2b0d7fe6416ee618a0218f1
- SHA256
  
  9cc55fc0b4dfac810932c254cd1ae1fd60336cc1c3c2e7849abeede50eba82b8
- SHA512
  
  d4576298e1f9badf102d84b8a0d0c58a3416c083ec2f0c61a62e01b9b0448c5d40a888a9d72d8b8f3a9720dff7f6f612c28cbcd076b76247576ddb0e839b23d5
- SSDEEP
  
  384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/vz5n3I:XS5nQJ24LR1bytOOtEvwDpjNbP/1I
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2