General
-
Target
2024-09-29_c21bedf813fe992bb7b2c7c0e9ec434b_cryptolocker
-
Size
36KB
-
Sample
240929-xq46xszfqf
-
MD5
c21bedf813fe992bb7b2c7c0e9ec434b
-
SHA1
52ba6c0b124a8b837d4ed5b7d9bf0096991e6e15
-
SHA256
b7c0e579335dc9c1babf08824cd2758a0fb059b7f5c815debdddd5d41217f4b9
-
SHA512
fbd39b5deebeeb49f1ba96bf1ea78d03fdd0fe817c2207f91e12f822f64293b2ba050309dfb218c9d7737f12456ee36dc31a7486122fcbe21a838c9bc6e21257
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkIT2:qDdFJy3QMOtEvwDpjjWMl7T2
Behavioral task
behavioral1
Sample
2024-09-29_c21bedf813fe992bb7b2c7c0e9ec434b_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-09-29_c21bedf813fe992bb7b2c7c0e9ec434b_cryptolocker
-
Size
36KB
-
MD5
c21bedf813fe992bb7b2c7c0e9ec434b
-
SHA1
52ba6c0b124a8b837d4ed5b7d9bf0096991e6e15
-
SHA256
b7c0e579335dc9c1babf08824cd2758a0fb059b7f5c815debdddd5d41217f4b9
-
SHA512
fbd39b5deebeeb49f1ba96bf1ea78d03fdd0fe817c2207f91e12f822f64293b2ba050309dfb218c9d7737f12456ee36dc31a7486122fcbe21a838c9bc6e21257
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkIT2:qDdFJy3QMOtEvwDpjjWMl7T2
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-