General
-
Target
2024-01-24_62ea11e741891319e56491cbabc84f13_cryptolocker
-
Size
41KB
-
Sample
240124-d6plmahgg4
-
MD5
62ea11e741891319e56491cbabc84f13
-
SHA1
ffd831c32ca0730c5a6b0c4cded5152a01103bbe
-
SHA256
089c3ad60be8426179e9f6c01d8a22e39bf1f72f33895206d453505f72da0f4d
-
SHA512
c74de95d5e3f25ac45949289ddd9858c84f933036b97e4eeb0cc0b1a5f1b23d9c928965bbcbcb5c6b0a75059eab08941cc3ce55b05db3c99babb8829dfa69aee
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMvcWV:bc/y2lkF0+B2P
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_62ea11e741891319e56491cbabc84f13_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-24_62ea11e741891319e56491cbabc84f13_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_62ea11e741891319e56491cbabc84f13_cryptolocker
-
Size
41KB
-
MD5
62ea11e741891319e56491cbabc84f13
-
SHA1
ffd831c32ca0730c5a6b0c4cded5152a01103bbe
-
SHA256
089c3ad60be8426179e9f6c01d8a22e39bf1f72f33895206d453505f72da0f4d
-
SHA512
c74de95d5e3f25ac45949289ddd9858c84f933036b97e4eeb0cc0b1a5f1b23d9c928965bbcbcb5c6b0a75059eab08941cc3ce55b05db3c99babb8829dfa69aee
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMvcWV:bc/y2lkF0+B2P
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-