General
-
Target
2024-08-05_e2740195eb66661ce9be122dba36457e_cryptolocker
-
Size
44KB
-
Sample
240805-jylgwsvclf
-
MD5
e2740195eb66661ce9be122dba36457e
-
SHA1
49c9cc1e175837b4b3f00445da654940e7487f4f
-
SHA256
c4e640ff45a2a11291ad997d639ae68ace8ada20404305da77a29adcf7f603ab
-
SHA512
c265952c468bf1a119d45c90524de44ad9d7953587e31c6b3c110190a46bce5d2b188712b7e0b175448b70e892024db143e2b3a603aa5f825d90d1530cd50669
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WJY:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFd
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-05_e2740195eb66661ce9be122dba36457e_cryptolocker.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-05_e2740195eb66661ce9be122dba36457e_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-05_e2740195eb66661ce9be122dba36457e_cryptolocker
-
Size
44KB
-
MD5
e2740195eb66661ce9be122dba36457e
-
SHA1
49c9cc1e175837b4b3f00445da654940e7487f4f
-
SHA256
c4e640ff45a2a11291ad997d639ae68ace8ada20404305da77a29adcf7f603ab
-
SHA512
c265952c468bf1a119d45c90524de44ad9d7953587e31c6b3c110190a46bce5d2b188712b7e0b175448b70e892024db143e2b3a603aa5f825d90d1530cd50669
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WJY:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFd
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-