General
-
Target
2024-01-25_d0ea9f6769e84b15c052c666172c12a2_cryptolocker
-
Size
42KB
-
Sample
240125-bzzrxaddc8
-
MD5
d0ea9f6769e84b15c052c666172c12a2
-
SHA1
244f6dd8525c450157a8c110b77013414c805fc3
-
SHA256
e76ca6e5227643e1d8d01354b615bdd9607c6b878f40abe2195788d1d91e5f79
-
SHA512
27458309f7129f0733382a57274ed26a49ddfcadce2e8e7373f301e3cf2f9b1ac97c5c88c51afb17365ab7037c7a2fa7f8d1cabcff4d27e8682cc63883ea1f81
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqmz4kmmw:bc/y2lkF0+BjjIw
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_d0ea9f6769e84b15c052c666172c12a2_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_d0ea9f6769e84b15c052c666172c12a2_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_d0ea9f6769e84b15c052c666172c12a2_cryptolocker
-
Size
42KB
-
MD5
d0ea9f6769e84b15c052c666172c12a2
-
SHA1
244f6dd8525c450157a8c110b77013414c805fc3
-
SHA256
e76ca6e5227643e1d8d01354b615bdd9607c6b878f40abe2195788d1d91e5f79
-
SHA512
27458309f7129f0733382a57274ed26a49ddfcadce2e8e7373f301e3cf2f9b1ac97c5c88c51afb17365ab7037c7a2fa7f8d1cabcff4d27e8682cc63883ea1f81
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqmz4kmmw:bc/y2lkF0+BjjIw
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-