General
-
Target
2024-01-25_18bf989c2b905be2a69a7582984afa05_cryptolocker
-
Size
35KB
-
Sample
240125-st4bkshga9
-
MD5
18bf989c2b905be2a69a7582984afa05
-
SHA1
f78d92e940a80deaa7606c5b8891c767df5ba33f
-
SHA256
0a42ff1141bbe062c8b74cd6d07f8e72097a72d32ac83d370cfa228cbd8f44b5
-
SHA512
cb011042b9440529b34912b38cc5ef5dca616cb7a60ada6ae269f32fe22950d082fb8e56b651cee9e31d62a57d623cfef8d0d976b188d1749c2fcea379836721
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRY:btB9g/WItCSsAGjX7e9N0hunRY
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_18bf989c2b905be2a69a7582984afa05_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_18bf989c2b905be2a69a7582984afa05_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-25_18bf989c2b905be2a69a7582984afa05_cryptolocker
-
Size
35KB
-
MD5
18bf989c2b905be2a69a7582984afa05
-
SHA1
f78d92e940a80deaa7606c5b8891c767df5ba33f
-
SHA256
0a42ff1141bbe062c8b74cd6d07f8e72097a72d32ac83d370cfa228cbd8f44b5
-
SHA512
cb011042b9440529b34912b38cc5ef5dca616cb7a60ada6ae269f32fe22950d082fb8e56b651cee9e31d62a57d623cfef8d0d976b188d1749c2fcea379836721
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRY:btB9g/WItCSsAGjX7e9N0hunRY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-