General
-
Target
2024-01-23_c95207fd39f76e99d10ff241e323a52a_cryptolocker
-
Size
68KB
-
Sample
240123-lvt1zahcek
-
MD5
c95207fd39f76e99d10ff241e323a52a
-
SHA1
7061b8ebb1daa92ae4019d6a0a1fbbf437cb8836
-
SHA256
e1e12680d944ed9114a96aea86201c8ed9ed028e17f492abd117906194eef5be
-
SHA512
1c040673d5c70b87b7aa654fed2f14046bf2a850c1e3bf68a86f10232f63ddebca19faf8b3835a1cc1f7ba137b20fa4e156ffc8924a77a4701559b54cb988633
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZe:DW60sllyWOtEvwDpjwF85w
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_c95207fd39f76e99d10ff241e323a52a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_c95207fd39f76e99d10ff241e323a52a_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-23_c95207fd39f76e99d10ff241e323a52a_cryptolocker
-
Size
68KB
-
MD5
c95207fd39f76e99d10ff241e323a52a
-
SHA1
7061b8ebb1daa92ae4019d6a0a1fbbf437cb8836
-
SHA256
e1e12680d944ed9114a96aea86201c8ed9ed028e17f492abd117906194eef5be
-
SHA512
1c040673d5c70b87b7aa654fed2f14046bf2a850c1e3bf68a86f10232f63ddebca19faf8b3835a1cc1f7ba137b20fa4e156ffc8924a77a4701559b54cb988633
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZe:DW60sllyWOtEvwDpjwF85w
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-