General
-
Target
2024-01-22_aacbe8fb6ec9185dc4a9b6509e0be5d2_cryptolocker
-
Size
41KB
-
Sample
240122-zgyznadga5
-
MD5
aacbe8fb6ec9185dc4a9b6509e0be5d2
-
SHA1
d1b31551246a56b0664c85b18fdb37111c6872cd
-
SHA256
eef328deea5d0f65d2804789701e1d49781feb4fd16e42fc2db7e6044e95b048
-
SHA512
f2f7e36ac62fdf42739d3cf55e531d906956f7ef8033890e96f263d059ecb1e11dfa0aa1f5d66fbf6b9585f7c67d4ae3b02e04ea5b38bb164c02e3416035fc91
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqV:bxNrC7kYo1Fxf3s05rwxbF0
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-22_aacbe8fb6ec9185dc4a9b6509e0be5d2_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-22_aacbe8fb6ec9185dc4a9b6509e0be5d2_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-22_aacbe8fb6ec9185dc4a9b6509e0be5d2_cryptolocker
-
Size
41KB
-
MD5
aacbe8fb6ec9185dc4a9b6509e0be5d2
-
SHA1
d1b31551246a56b0664c85b18fdb37111c6872cd
-
SHA256
eef328deea5d0f65d2804789701e1d49781feb4fd16e42fc2db7e6044e95b048
-
SHA512
f2f7e36ac62fdf42739d3cf55e531d906956f7ef8033890e96f263d059ecb1e11dfa0aa1f5d66fbf6b9585f7c67d4ae3b02e04ea5b38bb164c02e3416035fc91
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqV:bxNrC7kYo1Fxf3s05rwxbF0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-