General
-
Target
2024-01-25_4c7ff3a3b1135aeda703ff134ee55095_cryptolocker
-
Size
38KB
-
Sample
240125-rxab8saccq
-
MD5
4c7ff3a3b1135aeda703ff134ee55095
-
SHA1
e4380e15187d2fb64743d0234436df7ae2bac0c9
-
SHA256
92327b280eb6fdc8ffd0d23be45faeb41ef644931941f00e18bc8143ca0f2cdb
-
SHA512
a36141cfb7b57900b5da25179eb6ac1861b347f93f5f81a89800a78927f41db04635e3e6d8f7e5dc2c61bd61d66ee4e0bc2b04cbe7e173aa30b59c4e3f07b6e6
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlWuR:b/yC4GyNM01GuQMNXw2PSjHPbSuYlWuR
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_4c7ff3a3b1135aeda703ff134ee55095_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_4c7ff3a3b1135aeda703ff134ee55095_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_4c7ff3a3b1135aeda703ff134ee55095_cryptolocker
-
Size
38KB
-
MD5
4c7ff3a3b1135aeda703ff134ee55095
-
SHA1
e4380e15187d2fb64743d0234436df7ae2bac0c9
-
SHA256
92327b280eb6fdc8ffd0d23be45faeb41ef644931941f00e18bc8143ca0f2cdb
-
SHA512
a36141cfb7b57900b5da25179eb6ac1861b347f93f5f81a89800a78927f41db04635e3e6d8f7e5dc2c61bd61d66ee4e0bc2b04cbe7e173aa30b59c4e3f07b6e6
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlWuR:b/yC4GyNM01GuQMNXw2PSjHPbSuYlWuR
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-