ed3a25f29df7a8bfb06e58ba5a50e5bf318d350c114fd94bb438e774174dc611 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2023-09-26_fca6ac9485aaa86202705ed60d2dd300_cryptolocker.exe
Size

45KB
Sample

231106-zgmxdseg4s
MD5

fca6ac9485aaa86202705ed60d2dd300
SHA1

bd9e72da1fa6fe11bc2a87bfb404accb1a68f4da
SHA256

ed3a25f29df7a8bfb06e58ba5a50e5bf318d350c114fd94bb438e774174dc611
SHA512

b726a80a04d0ecf2f826be965d08ee3db62afa14cc5c06fa14af7a53f4ee32f40ae9a9ec2bf4e940ed786c71b39443ad0daa733ca3edfeb57feb85e1b7d674ff
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXckdpA:V6QFElP6n+gMQMOtEvwDpjeJQ7pojak8

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-26_fca6ac9485aaa86202705ed60d2dd300_cryptolocker.exe
- Size
  
  45KB
- MD5
  
  fca6ac9485aaa86202705ed60d2dd300
- SHA1
  
  bd9e72da1fa6fe11bc2a87bfb404accb1a68f4da
- SHA256
  
  ed3a25f29df7a8bfb06e58ba5a50e5bf318d350c114fd94bb438e774174dc611
- SHA512
  
  b726a80a04d0ecf2f826be965d08ee3db62afa14cc5c06fa14af7a53f4ee32f40ae9a9ec2bf4e940ed786c71b39443ad0daa733ca3edfeb57feb85e1b7d674ff
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXckdpA:V6QFElP6n+gMQMOtEvwDpjeJQ7pojak8
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2