General
-
Target
2024-09-19_82b7ec400a3adeffb621edf1dff3fdf6_cryptolocker
-
Size
40KB
-
Sample
240919-d38v4aygmp
-
MD5
82b7ec400a3adeffb621edf1dff3fdf6
-
SHA1
ba823e02edb5ff7b319b1801417975bb2eb8ebe3
-
SHA256
aee891113c40d28e1ef9a69033d862085a9bb4dcf7adf22ffe6e4f4571c93b74
-
SHA512
7f351767ef6045b0f20f2bce8d1cf8950b086b090b8bdc674b19bab15750545d0dcc72e5cf77986917318d3a2743741f697d2ba14cea513c80c1ce49753e752c
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaq:qDdFJy3QMOtEvwDpjjWMl7Tdq
Behavioral task
behavioral1
Sample
2024-09-19_82b7ec400a3adeffb621edf1dff3fdf6_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-09-19_82b7ec400a3adeffb621edf1dff3fdf6_cryptolocker
-
Size
40KB
-
MD5
82b7ec400a3adeffb621edf1dff3fdf6
-
SHA1
ba823e02edb5ff7b319b1801417975bb2eb8ebe3
-
SHA256
aee891113c40d28e1ef9a69033d862085a9bb4dcf7adf22ffe6e4f4571c93b74
-
SHA512
7f351767ef6045b0f20f2bce8d1cf8950b086b090b8bdc674b19bab15750545d0dcc72e5cf77986917318d3a2743741f697d2ba14cea513c80c1ce49753e752c
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaq:qDdFJy3QMOtEvwDpjjWMl7Tdq
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-