General
-
Target
20240521871b5515c64891358b210eb49a0c2d7fcryptolocker.exe
-
Size
24KB
-
Sample
240522-xqf44ada82
-
MD5
871b5515c64891358b210eb49a0c2d7f
-
SHA1
c59d23940a15b90bf00167c2d5dfea2f18a540d7
-
SHA256
6822a63856e3199e9635640d448844db2da11daec50f239d461e9832050a1bd0
-
SHA512
109a315fd6d14e0aeb3a91f8950ac4622a167ec6a7e9ce72332f601dff2ea365df4cc891ed9e32ed2377f4b7cb01ffbfbfc7ef76427024b0f069dbb06496f2df
-
SSDEEP
384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMJ23/:bVCPwFRo6CpwXFXSqQXfjAsJ+/
Behavioral task
behavioral1
Sample
20240521871b5515c64891358b210eb49a0c2d7fcryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
20240521871b5515c64891358b210eb49a0c2d7fcryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
20240521871b5515c64891358b210eb49a0c2d7fcryptolocker.exe
-
Size
24KB
-
MD5
871b5515c64891358b210eb49a0c2d7f
-
SHA1
c59d23940a15b90bf00167c2d5dfea2f18a540d7
-
SHA256
6822a63856e3199e9635640d448844db2da11daec50f239d461e9832050a1bd0
-
SHA512
109a315fd6d14e0aeb3a91f8950ac4622a167ec6a7e9ce72332f601dff2ea365df4cc891ed9e32ed2377f4b7cb01ffbfbfc7ef76427024b0f069dbb06496f2df
-
SSDEEP
384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMJ23/:bVCPwFRo6CpwXFXSqQXfjAsJ+/
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-