General
-
Target
2024-01-24_eb523e627938667346053c87931ed523_cryptolocker
-
Size
40KB
-
Sample
240124-a74kdseaek
-
MD5
eb523e627938667346053c87931ed523
-
SHA1
c07a35844ecef93b5a2e84b85a1f8448e5805616
-
SHA256
73228fbd28718de5bc86b02cbd0e745ec0024c28e02bd64873cbccacb271fc96
-
SHA512
4c16aa28ab7649e42ec527c6228b1d3e1dbeba493246520ca290056e780bbe6bbb0e50ac15b471f683ed62ed64d6c3cf1f7bfad85f001bf349a3bf4a352c526e
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpj:btB9g/WItCSsAGjX7e9N0hunrknlj
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_eb523e627938667346053c87931ed523_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_eb523e627938667346053c87931ed523_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_eb523e627938667346053c87931ed523_cryptolocker
-
Size
40KB
-
MD5
eb523e627938667346053c87931ed523
-
SHA1
c07a35844ecef93b5a2e84b85a1f8448e5805616
-
SHA256
73228fbd28718de5bc86b02cbd0e745ec0024c28e02bd64873cbccacb271fc96
-
SHA512
4c16aa28ab7649e42ec527c6228b1d3e1dbeba493246520ca290056e780bbe6bbb0e50ac15b471f683ed62ed64d6c3cf1f7bfad85f001bf349a3bf4a352c526e
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpj:btB9g/WItCSsAGjX7e9N0hunrknlj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-