General
-
Target
2024-09-13_df976bee1ccbf134f2c306c2bf49ccae_cryptolocker
-
Size
90KB
-
Sample
240913-e5zwmsvapl
-
MD5
df976bee1ccbf134f2c306c2bf49ccae
-
SHA1
34d7cce1ae099205848f61812507a9f2fc3a2c4b
-
SHA256
19210a0e9ab71e250fedf3465e89ed55b9731a45a194b4083a9022d442c85b82
-
SHA512
0cc6754ca1bf4b3611d25a35a27652407633abf7a22fca5af4bdb037cda75911651c656e5a6a0b47bea162d557cff60b12e4a5f87783a7e9f4b63df35c4da385
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAK:n6a+1SEOtEvwDpjYYvQd2PK
Behavioral task
behavioral1
Sample
2024-09-13_df976bee1ccbf134f2c306c2bf49ccae_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-09-13_df976bee1ccbf134f2c306c2bf49ccae_cryptolocker
-
Size
90KB
-
MD5
df976bee1ccbf134f2c306c2bf49ccae
-
SHA1
34d7cce1ae099205848f61812507a9f2fc3a2c4b
-
SHA256
19210a0e9ab71e250fedf3465e89ed55b9731a45a194b4083a9022d442c85b82
-
SHA512
0cc6754ca1bf4b3611d25a35a27652407633abf7a22fca5af4bdb037cda75911651c656e5a6a0b47bea162d557cff60b12e4a5f87783a7e9f4b63df35c4da385
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAK:n6a+1SEOtEvwDpjYYvQd2PK
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-