General
-
Target
2024-08-17_60f5c405bb212b75bea12c3b8aa6b86a_cryptolocker
-
Size
64KB
-
Sample
240817-hr6ntawdml
-
MD5
60f5c405bb212b75bea12c3b8aa6b86a
-
SHA1
ba6bd6e7c3656c5c3f3e51c4e773c2bf5dd5f497
-
SHA256
d57656eefcc5ae25112bd1352f976164e365c6739bac79699d990cefec439c10
-
SHA512
626fe68aa3b52cdde71e9c7deb25683d926ff33c1c7d7103ec6d1ed110341cce24ad17d20b02cb708bfd244913835e657b6c6ded3d7a91b1fa85b7f6500b0319
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnT5a:btng54SMLr+/AO/kIhfoKMHda8
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-17_60f5c405bb212b75bea12c3b8aa6b86a_cryptolocker.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-17_60f5c405bb212b75bea12c3b8aa6b86a_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-17_60f5c405bb212b75bea12c3b8aa6b86a_cryptolocker
-
Size
64KB
-
MD5
60f5c405bb212b75bea12c3b8aa6b86a
-
SHA1
ba6bd6e7c3656c5c3f3e51c4e773c2bf5dd5f497
-
SHA256
d57656eefcc5ae25112bd1352f976164e365c6739bac79699d990cefec439c10
-
SHA512
626fe68aa3b52cdde71e9c7deb25683d926ff33c1c7d7103ec6d1ed110341cce24ad17d20b02cb708bfd244913835e657b6c6ded3d7a91b1fa85b7f6500b0319
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnT5a:btng54SMLr+/AO/kIhfoKMHda8
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-