d57a00ea28651fc99e22c1905cbcad5325af4bb2a0a50a46b85cb7f050d7deeb

Analysis

max time kernel
0s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 05:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-01-09_7c4953f83032797e4a913df7cf376e6a_cryptolocker.exe
Size

74KB
MD5

7c4953f83032797e4a913df7cf376e6a
SHA1

82804b2358136eda36f84de93cd752262657910b
SHA256

d57a00ea28651fc99e22c1905cbcad5325af4bb2a0a50a46b85cb7f050d7deeb
SHA512

8adc33ea9457efae762e6e94988b7a688f078aa3627412a16c91a44a2fbc528b95e6ac822ebb4859410b733c4ed28a5e546ae9a009f87df7594495d211d7e875
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3Kr:ZVxkGOtEvwDpjca8

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1232405761-1209240240-3206092754-1000\Control Panel\International\Geo\Nation	2024-01-09_7c4953f83032797e4a913df7cf376e6a_cryptolocker.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2024-01-09_7c4953f83032797e4a913df7cf376e6a_cryptolocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-09_7c4953f83032797e4a913df7cf376e6a_cryptolocker.exe"
1⤵
- Checks computer location settings
PID:540
- C:\Users\Admin\AppData\Local\Temp\misid.exe
  "C:\Users\Admin\AppData\Local\Temp\misid.exe"
  2⤵
  PID:3960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
10KB

MD5
d6eb75a44df80a6dbcc3ae3a0185aeb1

SHA1
ad2ecdcd40aa95e9a772471977d0a5afdff6f9bd

SHA256
f2990c1c847b16f7a63e50242ef8ddee56970b600856f1d10df473076db97d4d

SHA512
ad5f7d969ce759bcdc487d91f3fcdb8a6c869ddd2ef202eae623bb93ee64dd27b313211e82ed17a5a3a5e304a1185a944ef1d02676e9a84b2f0a6913b2f43f0f

Download Submit
C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
30KB

MD5
b84429cf7508014b7d10704f790ae858

SHA1
be778cee14ff7f4296d5267b0e41b523e0941e0a

SHA256
6df4b3163592efd8a8ffcc3d4b3e0212a9d837d207cd9b5ea1a200b2aff4ae60

SHA512
c147ea3803b5f5b59335d62a4b3b0a12b0aaadecdf1dd71d8c936c4a6b9583fcdd51e0f2dc0ae791461bd5e19a575d9b4bb582f72674103efd9d74e23e038595

Download Submit
C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
24KB

MD5
f48230744f21c10b2fa95189bc2b5dec

SHA1
f213349e67075dd5c0cd0ca037c5fb5f274e22ac

SHA256
6ddce70745020b5fe65d490e9733eb65389931d5dcf2dfbd29a53752b77363ec

SHA512
7419b07a52cb650bc8d1f4df7d0d8f37a997ab257483397658bab65732808668fc7be15866872abc8e3591f71f94c56b448f03e48e12f9806665ac215a2d32e0

Download Submit
C:\Users\Admin\AppData\Local\Temp\misids.exe

Filesize
315B

MD5
a34ac19f4afae63adc5d2f7bc970c07f

SHA1
a82190fc530c265aa40a045c21770d967f4767b8

SHA256
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

SHA512
42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765

Download Submit
memory/540-3-0x0000000000810000-0x0000000000816000-memory.dmp

Filesize
24KB

Download
memory/540-2-0x00000000006A0000-0x00000000006A6000-memory.dmp

Filesize
24KB

Download
memory/540-1-0x00000000006A0000-0x00000000006A6000-memory.dmp

Filesize
24KB

Download
memory/540-0-0x00000000004E0000-0x00000000004E3000-memory.dmp

Filesize
12KB

Download
memory/540-17-0x00000000004E0000-0x00000000004E3000-memory.dmp

Filesize
12KB

Download
memory/3960-19-0x00000000006C0000-0x00000000006C6000-memory.dmp

Filesize
24KB

Download