General
-
Target
20240522dd34407ae668b4d497e503c83163be42cryptolocker
-
Size
43KB
-
Sample
240522-xv9xzadb7t
-
MD5
dd34407ae668b4d497e503c83163be42
-
SHA1
917b8cf9c59a042d66def1d47043b6452115bb21
-
SHA256
8198155a1a95675ac20efed6df1b9519a599b9af9ae1ab0323569beb278f36fd
-
SHA512
387444035606e5e0aea689142b62e0762b5631c129415dcc96eaabaedd20e99c3778ee64725979115e243afc8ea47c4b17246d56a2756852dcde31f7fe31b4fb
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDU7b:bm74zYcgT/EkM0ryfjmb
Static task
static1
Behavioral task
behavioral1
Sample
20240522dd34407ae668b4d497e503c83163be42cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
20240522dd34407ae668b4d497e503c83163be42cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
20240522dd34407ae668b4d497e503c83163be42cryptolocker
-
Size
43KB
-
MD5
dd34407ae668b4d497e503c83163be42
-
SHA1
917b8cf9c59a042d66def1d47043b6452115bb21
-
SHA256
8198155a1a95675ac20efed6df1b9519a599b9af9ae1ab0323569beb278f36fd
-
SHA512
387444035606e5e0aea689142b62e0762b5631c129415dcc96eaabaedd20e99c3778ee64725979115e243afc8ea47c4b17246d56a2756852dcde31f7fe31b4fb
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDU7b:bm74zYcgT/EkM0ryfjmb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-