cd25335d970cdf880e11f0bdb56859ecaca6245787293ec76246b4754a639b33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

202405208a35b5eb8a2ce086a1ce9ba8571c2195cryptolocker_NeikiAnalytics
Size

52KB
Sample

240521-j3r58seb4z
MD5

8a35b5eb8a2ce086a1ce9ba8571c2195
SHA1

21086cbe0e4c9c588b4ee10dda3931071bbc5472
SHA256

cd25335d970cdf880e11f0bdb56859ecaca6245787293ec76246b4754a639b33
SHA512

474dfa4fdee529fc2144a727350021b11cbdb22c7c8194567351e41c6dbd6b0736351b0ba974006023783a21bc0d8da0546a527810d3588781ff477680c4ae37
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyt:6j+1NMOtEvwDpjr8hhXy+iyyt

Score

7^/10

Malware Config

Targets

- Target
  
  202405208a35b5eb8a2ce086a1ce9ba8571c2195cryptolocker_NeikiAnalytics
- Size
  
  52KB
- MD5
  
  8a35b5eb8a2ce086a1ce9ba8571c2195
- SHA1
  
  21086cbe0e4c9c588b4ee10dda3931071bbc5472
- SHA256
  
  cd25335d970cdf880e11f0bdb56859ecaca6245787293ec76246b4754a639b33
- SHA512
  
  474dfa4fdee529fc2144a727350021b11cbdb22c7c8194567351e41c6dbd6b0736351b0ba974006023783a21bc0d8da0546a527810d3588781ff477680c4ae37
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyt:6j+1NMOtEvwDpjr8hhXy+iyyt
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2