General

  • Target

    NEAS.2023-09-06_9ab122231c0497880bdb261ddc48531d_cryptolocker_JC.exe

  • Size

    74KB

  • Sample

    231023-y8a68sgf87

  • MD5

    9ab122231c0497880bdb261ddc48531d

  • SHA1

    56f01b1966269b9a7a887457678cd2dc59412adf

  • SHA256

    00121fb2a8907f7c7ce32d54a813138b277b7db071a006a722209612244262cd

  • SHA512

    011938c83f24369c13603b0e93cd5f20874eb51d42ab67b9a7368064c31a583bc46e483edeca98003d077e575f10dcdce5039304751fbbd921df77c8f03b7a20

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YS2:T6a+rdOOtEvwDpjNM

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.2023-09-06_9ab122231c0497880bdb261ddc48531d_cryptolocker_JC.exe

    • Size

      74KB

    • MD5

      9ab122231c0497880bdb261ddc48531d

    • SHA1

      56f01b1966269b9a7a887457678cd2dc59412adf

    • SHA256

      00121fb2a8907f7c7ce32d54a813138b277b7db071a006a722209612244262cd

    • SHA512

      011938c83f24369c13603b0e93cd5f20874eb51d42ab67b9a7368064c31a583bc46e483edeca98003d077e575f10dcdce5039304751fbbd921df77c8f03b7a20

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YS2:T6a+rdOOtEvwDpjNM

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks