General
-
Target
202405216e16802668d1dd95e21d6a65f65be195cryptolocker.exe
-
Size
59KB
-
Sample
240522-xnkphada24
-
MD5
6e16802668d1dd95e21d6a65f65be195
-
SHA1
2fd04914abd2bb1cadd248e93bf91034dbe3ddd9
-
SHA256
f658b27c6341221442d65f4f1c14f09bcdcd40c73c5e81b863773486468765f0
-
SHA512
89f330821776df3fb35c21a235eeeb080e1d1411a61565965b529d027ef18166e0e6c33ab4d5860a02b6f946f330aa6a91f0defd38df35f8818ae028b73a611a
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPj8:H6QFElP6n+gou9cvMOtEvwDpjCpVXJ
Behavioral task
behavioral1
Sample
202405216e16802668d1dd95e21d6a65f65be195cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
202405216e16802668d1dd95e21d6a65f65be195cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
202405216e16802668d1dd95e21d6a65f65be195cryptolocker.exe
-
Size
59KB
-
MD5
6e16802668d1dd95e21d6a65f65be195
-
SHA1
2fd04914abd2bb1cadd248e93bf91034dbe3ddd9
-
SHA256
f658b27c6341221442d65f4f1c14f09bcdcd40c73c5e81b863773486468765f0
-
SHA512
89f330821776df3fb35c21a235eeeb080e1d1411a61565965b529d027ef18166e0e6c33ab4d5860a02b6f946f330aa6a91f0defd38df35f8818ae028b73a611a
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPj8:H6QFElP6n+gou9cvMOtEvwDpjCpVXJ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-