General
-
Target
2024-01-03_2ef52a067fafdd516c379308b05893d8_cryptolocker
-
Size
42KB
-
Sample
240104-smb9hsaggk
-
MD5
2ef52a067fafdd516c379308b05893d8
-
SHA1
65c0e40d76a514f45133148d011c5a9e53ad98b7
-
SHA256
32989e7129b548ab8e2ccfa42cf1ef69e77d1650d7c44b72bcbe4ab3d4729703
-
SHA512
9de1092f0564d3762e2c2f33e18a15e4b94595d5a5ef886ee4f01844bf1f19658ab4d217f68497da3a4d8bbcba0933934627a3f50433e0b91cc1e37d95ad8a85
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTMN:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+V
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-03_2ef52a067fafdd516c379308b05893d8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-03_2ef52a067fafdd516c379308b05893d8_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-03_2ef52a067fafdd516c379308b05893d8_cryptolocker
-
Size
42KB
-
MD5
2ef52a067fafdd516c379308b05893d8
-
SHA1
65c0e40d76a514f45133148d011c5a9e53ad98b7
-
SHA256
32989e7129b548ab8e2ccfa42cf1ef69e77d1650d7c44b72bcbe4ab3d4729703
-
SHA512
9de1092f0564d3762e2c2f33e18a15e4b94595d5a5ef886ee4f01844bf1f19658ab4d217f68497da3a4d8bbcba0933934627a3f50433e0b91cc1e37d95ad8a85
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTMN:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+V
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-