General
-
Target
20240522fbf553cdb875f52b97a7fd46214e62eacryptolocker
-
Size
4.5MB
-
Sample
240522-xvr26adc69
-
MD5
fbf553cdb875f52b97a7fd46214e62ea
-
SHA1
16a29e4531824db4bd15a3b1377a6c46ce9f5d15
-
SHA256
05566346a9e66e8d4b072101a1835e4a2c7275a2d27627736f7281f29677db3d
-
SHA512
a9c91a5499e7dc5f02f423749fed82aab210596adc6c94268d5ed203cf6f198866b8c8f6f8c975370ee75503aa78cdf87c1185ac9b4d39f544a96753c8efa486
-
SSDEEP
98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTg:g/ZFIjBzF/ZFIjBzPEUusg
Behavioral task
behavioral1
Sample
20240522fbf553cdb875f52b97a7fd46214e62eacryptolocker.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
20240522fbf553cdb875f52b97a7fd46214e62eacryptolocker
-
Size
4.5MB
-
MD5
fbf553cdb875f52b97a7fd46214e62ea
-
SHA1
16a29e4531824db4bd15a3b1377a6c46ce9f5d15
-
SHA256
05566346a9e66e8d4b072101a1835e4a2c7275a2d27627736f7281f29677db3d
-
SHA512
a9c91a5499e7dc5f02f423749fed82aab210596adc6c94268d5ed203cf6f198866b8c8f6f8c975370ee75503aa78cdf87c1185ac9b4d39f544a96753c8efa486
-
SSDEEP
98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTg:g/ZFIjBzF/ZFIjBzPEUusg
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-