General
-
Target
2024-09-27_fa6a6d020a0bbd5e3a4a317db1013637_cryptolocker
-
Size
55KB
-
Sample
240927-egpqrstgrp
-
MD5
fa6a6d020a0bbd5e3a4a317db1013637
-
SHA1
e4fa9d835d0fc694ccfa35ff37e19c7fa35f8ea7
-
SHA256
0f377546c8f6bcddde6de47c882fddd66bd6b172c890e06ee3b82403cdeefccd
-
SHA512
94c2fd01f81b5a0180b6f8c2b3d5cc75c5d929006a124f8fd0601409fbe35db67fc969ca8fc3fb0ecc99878db88e4f2ba7ba89756d15a95c08dd9a2a0d72c02d
-
SSDEEP
768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFP8q:b7/y28wZEjbnouy8G76iH/NLp/
Behavioral task
behavioral1
Sample
2024-09-27_fa6a6d020a0bbd5e3a4a317db1013637_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-09-27_fa6a6d020a0bbd5e3a4a317db1013637_cryptolocker
-
Size
55KB
-
MD5
fa6a6d020a0bbd5e3a4a317db1013637
-
SHA1
e4fa9d835d0fc694ccfa35ff37e19c7fa35f8ea7
-
SHA256
0f377546c8f6bcddde6de47c882fddd66bd6b172c890e06ee3b82403cdeefccd
-
SHA512
94c2fd01f81b5a0180b6f8c2b3d5cc75c5d929006a124f8fd0601409fbe35db67fc969ca8fc3fb0ecc99878db88e4f2ba7ba89756d15a95c08dd9a2a0d72c02d
-
SSDEEP
768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFP8q:b7/y28wZEjbnouy8G76iH/NLp/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-