General
-
Target
2024-01-25_6292e728ba1895464ce61c34eccd4d36_cryptolocker
-
Size
93KB
-
Sample
240125-s1hcpahgh7
-
MD5
6292e728ba1895464ce61c34eccd4d36
-
SHA1
09fb24f568776322ba95315eb1808aa01f3a5ea4
-
SHA256
5c20cebc6e2d19593aad56797121a324bf1f0d154042aa5b80a9ac5083ba708d
-
SHA512
68333a0d1ad9bfe817ed1361770a8d5c444cd480bb73d319b53d2f13fce6f99356f14406643e022bfe5064215f197170fb2dd6dc93e19a017fb28553bfc30cba
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlvODB:xj+VGMOtEvwDpjubwQEIiVmkxvEB
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_6292e728ba1895464ce61c34eccd4d36_cryptolocker.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_6292e728ba1895464ce61c34eccd4d36_cryptolocker
-
Size
93KB
-
MD5
6292e728ba1895464ce61c34eccd4d36
-
SHA1
09fb24f568776322ba95315eb1808aa01f3a5ea4
-
SHA256
5c20cebc6e2d19593aad56797121a324bf1f0d154042aa5b80a9ac5083ba708d
-
SHA512
68333a0d1ad9bfe817ed1361770a8d5c444cd480bb73d319b53d2f13fce6f99356f14406643e022bfe5064215f197170fb2dd6dc93e19a017fb28553bfc30cba
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlvODB:xj+VGMOtEvwDpjubwQEIiVmkxvEB
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-