General
-
Target
2024-01-22_31244b59200641cc228645a596d6a957_cryptolocker
-
Size
39KB
-
Sample
240122-w8bfwscfe9
-
MD5
31244b59200641cc228645a596d6a957
-
SHA1
4afbeb4e60f90f3c6275e5a1db83f31868cbc018
-
SHA256
26e85b15a5e1b51791fecf70001f1e55aa3cab22ac81e65476d3357392066ddb
-
SHA512
250a0bb4b2f9b43925499ba68e12d7bcf538c42eb0ab93370d48407fe8bc30ff39069d4b1e5a2e6c34228cd474e77820bd5bbaca9c6a8d0cdff16d3cda02b78b
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vVcF0:bgGYcA/53GADw8ClrcTcF0
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-22_31244b59200641cc228645a596d6a957_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-22_31244b59200641cc228645a596d6a957_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-22_31244b59200641cc228645a596d6a957_cryptolocker
-
Size
39KB
-
MD5
31244b59200641cc228645a596d6a957
-
SHA1
4afbeb4e60f90f3c6275e5a1db83f31868cbc018
-
SHA256
26e85b15a5e1b51791fecf70001f1e55aa3cab22ac81e65476d3357392066ddb
-
SHA512
250a0bb4b2f9b43925499ba68e12d7bcf538c42eb0ab93370d48407fe8bc30ff39069d4b1e5a2e6c34228cd474e77820bd5bbaca9c6a8d0cdff16d3cda02b78b
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vVcF0:bgGYcA/53GADw8ClrcTcF0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-