General
-
Target
2024-11-21_553b9ebc3c02b29d05a807c42f5f7223_cryptolocker
-
Size
55KB
-
Sample
241121-jb1y3azlgv
-
MD5
553b9ebc3c02b29d05a807c42f5f7223
-
SHA1
514732f17b62fefb639e5ec73626ff72789e9366
-
SHA256
1de90d5e4c6c3c6ed25dbfac8864097800e8d4c7d6971e2eade35336170ed259
-
SHA512
fe6d98dc0c5f36dcc84484102317ae30e9cc8c20a4c4522970e30944eeb10151d9a325ea57d85ae1088c5dd76edbdad70d034c54af22ec030ddf7257d9af1ccf
-
SSDEEP
768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPw:b7/y28wZEjbnouy8G76iH/NLpm
Behavioral task
behavioral1
Sample
2024-11-21_553b9ebc3c02b29d05a807c42f5f7223_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-11-21_553b9ebc3c02b29d05a807c42f5f7223_cryptolocker
-
Size
55KB
-
MD5
553b9ebc3c02b29d05a807c42f5f7223
-
SHA1
514732f17b62fefb639e5ec73626ff72789e9366
-
SHA256
1de90d5e4c6c3c6ed25dbfac8864097800e8d4c7d6971e2eade35336170ed259
-
SHA512
fe6d98dc0c5f36dcc84484102317ae30e9cc8c20a4c4522970e30944eeb10151d9a325ea57d85ae1088c5dd76edbdad70d034c54af22ec030ddf7257d9af1ccf
-
SSDEEP
768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPw:b7/y28wZEjbnouy8G76iH/NLpm
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-