Overview

overview

7

Static

static

7

NEAS.2023-...er.exe

windows7-x64

7

NEAS.2023-...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.2023-09-26_01ff2eb7e192cb565463142c8666bf9e_cryptolocker.exe

  • Size

    90KB

  • Sample

    231106-y681gsee3z

  • MD5

    01ff2eb7e192cb565463142c8666bf9e

  • SHA1

    6d47fdb9650b59e3130b83659e7cec0f2dc541d5

  • SHA256

    03934a294ac022a9042c92dfdac03d23478202d4e5be900ad73a0aac7d7ff391

  • SHA512

    8bb4b5e71af0ba3df8ec5f358c83030247fe313987eca69001ec78ad8e3947d41e404bbc83145a760bc278b7dd3bb0b0c4bf187e1bcdbbae105a3d3d92117659

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp7:AnBdOOtEvwDpj6zA

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.2023-09-26_01ff2eb7e192cb565463142c8666bf9e_cryptolocker.exe

    • Size

      90KB

    • MD5

      01ff2eb7e192cb565463142c8666bf9e

    • SHA1

      6d47fdb9650b59e3130b83659e7cec0f2dc541d5

    • SHA256

      03934a294ac022a9042c92dfdac03d23478202d4e5be900ad73a0aac7d7ff391

    • SHA512

      8bb4b5e71af0ba3df8ec5f358c83030247fe313987eca69001ec78ad8e3947d41e404bbc83145a760bc278b7dd3bb0b0c4bf187e1bcdbbae105a3d3d92117659

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp7:AnBdOOtEvwDpj6zA

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks