General
-
Target
2024-09-19_a30e373936b38b8469a8499a28fae1c6_cryptolocker
-
Size
96KB
-
Sample
240919-g8paesvele
-
MD5
a30e373936b38b8469a8499a28fae1c6
-
SHA1
aaafe074e09323207fc32a973f3c791a4d2fda6e
-
SHA256
c73ad9cb0f6297a8aee798a88d012146428e8d4b83ba7dbad149d65e6775811f
-
SHA512
bcccfd723fb770e545be5fe591cb35a0c4805999b9c5ce52b5fcfde9d48e270d4a0230a9dc2f7ce3f751f3601aa7f87995c1dfa633301726899f946366046629
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPJ:AnBdOOtEvwDpj6zL
Behavioral task
behavioral1
Sample
2024-09-19_a30e373936b38b8469a8499a28fae1c6_cryptolocker.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
2024-09-19_a30e373936b38b8469a8499a28fae1c6_cryptolocker
-
Size
96KB
-
MD5
a30e373936b38b8469a8499a28fae1c6
-
SHA1
aaafe074e09323207fc32a973f3c791a4d2fda6e
-
SHA256
c73ad9cb0f6297a8aee798a88d012146428e8d4b83ba7dbad149d65e6775811f
-
SHA512
bcccfd723fb770e545be5fe591cb35a0c4805999b9c5ce52b5fcfde9d48e270d4a0230a9dc2f7ce3f751f3601aa7f87995c1dfa633301726899f946366046629
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPJ:AnBdOOtEvwDpj6zL
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-