General
-
Target
2024-01-01_196d62f3ad961b348d8ec9706d1f5f89_cryptolocker
-
Size
42KB
-
Sample
240105-gbz1nabcal
-
MD5
196d62f3ad961b348d8ec9706d1f5f89
-
SHA1
4da3a7c13d1f41125204a11e3e5a1075ddd4f836
-
SHA256
8a167b172a5c142e42bbb53364ab1384589f7ce3c88de1caa7f4b9f37e72add2
-
SHA512
0232948e30c7ba2ea44dfed02ae0680ef50cd4b9ec94ac8e2f9f23b6c80fa233b74ec657602ef2825af25647a467d7f38cf274ab1b33701d11b4ebe07661d780
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5zx:bgGYcA/53GAA6y37nL
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_196d62f3ad961b348d8ec9706d1f5f89_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_196d62f3ad961b348d8ec9706d1f5f89_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-01_196d62f3ad961b348d8ec9706d1f5f89_cryptolocker
-
Size
42KB
-
MD5
196d62f3ad961b348d8ec9706d1f5f89
-
SHA1
4da3a7c13d1f41125204a11e3e5a1075ddd4f836
-
SHA256
8a167b172a5c142e42bbb53364ab1384589f7ce3c88de1caa7f4b9f37e72add2
-
SHA512
0232948e30c7ba2ea44dfed02ae0680ef50cd4b9ec94ac8e2f9f23b6c80fa233b74ec657602ef2825af25647a467d7f38cf274ab1b33701d11b4ebe07661d780
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5zx:bgGYcA/53GAA6y37nL
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-