General
-
Target
2024-09-19_e9de9b2673c95b144c6aa7af2c84eef3_cryptolocker
-
Size
96KB
-
Sample
240919-ha2crsvhpk
-
MD5
e9de9b2673c95b144c6aa7af2c84eef3
-
SHA1
1b0f1c06099bf97a21f25a93edaf2c1c3ade7aa0
-
SHA256
c8792153000becaef06cec327a79f968b55d651897a211499aea02dd050e5cbf
-
SHA512
069b1bca40a6a207fbed62373535bd499ddd6dd31c8845ff325df0a10032f4ff2608f9af7e2391f52f59d66ccf1cd35869ec58558228ab3f0979ba6d96d5bbf8
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp+ofI5MJ:AnBdOOtEvwDpj6zK
Behavioral task
behavioral1
Sample
2024-09-19_e9de9b2673c95b144c6aa7af2c84eef3_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-09-19_e9de9b2673c95b144c6aa7af2c84eef3_cryptolocker
-
Size
96KB
-
MD5
e9de9b2673c95b144c6aa7af2c84eef3
-
SHA1
1b0f1c06099bf97a21f25a93edaf2c1c3ade7aa0
-
SHA256
c8792153000becaef06cec327a79f968b55d651897a211499aea02dd050e5cbf
-
SHA512
069b1bca40a6a207fbed62373535bd499ddd6dd31c8845ff325df0a10032f4ff2608f9af7e2391f52f59d66ccf1cd35869ec58558228ab3f0979ba6d96d5bbf8
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp+ofI5MJ:AnBdOOtEvwDpj6zK
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-