General
-
Target
2024-01-18_bd0d3244b5c2154d75f3ad6d1a9999ef_cryptolocker
-
Size
34KB
-
Sample
240118-299b7sfbhn
-
MD5
bd0d3244b5c2154d75f3ad6d1a9999ef
-
SHA1
cf1cb88335b28fbf96def44abcc9624fe06be5da
-
SHA256
2bb28130614325022493a9905adb25a818939b12926701246c40392dfbef338d
-
SHA512
03e906297027d3fce5e5c26a4918ad123c41bb6bc82e2492a5217a72554d017e35c21d6e62c954409268455e9a3454d4e7fbbb15a1ded0a66b3205ac691f6e23
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lw:bA74zYcgT/Ekd0ryfjPIunqpeNswmv
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_bd0d3244b5c2154d75f3ad6d1a9999ef_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-18_bd0d3244b5c2154d75f3ad6d1a9999ef_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-18_bd0d3244b5c2154d75f3ad6d1a9999ef_cryptolocker
-
Size
34KB
-
MD5
bd0d3244b5c2154d75f3ad6d1a9999ef
-
SHA1
cf1cb88335b28fbf96def44abcc9624fe06be5da
-
SHA256
2bb28130614325022493a9905adb25a818939b12926701246c40392dfbef338d
-
SHA512
03e906297027d3fce5e5c26a4918ad123c41bb6bc82e2492a5217a72554d017e35c21d6e62c954409268455e9a3454d4e7fbbb15a1ded0a66b3205ac691f6e23
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lw:bA74zYcgT/Ekd0ryfjPIunqpeNswmv
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-