General
-
Target
2024-01-26_c57e4df4a677abf4bf9dd5c0beca70c4_cryptolocker
-
Size
50KB
-
Sample
240126-c6k3rsdgam
-
MD5
c57e4df4a677abf4bf9dd5c0beca70c4
-
SHA1
6bc2409c206db5cba1cd7113f16c65f2620b1c43
-
SHA256
d4ffb544ca06b275ef2e20fa723054148335e627eae739ca46abbbfd189debcc
-
SHA512
286b6d4fc6602c26f2b756c087a55b6cde5d97dedb616c0e85dbd73a41b5d57c53bada1863a74642e773c5b4fe4d1aaa11799f87ed585b3ae2e2567c81cd0e28
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9gE1NIo:bIDOw9a0DwitDZzwIo
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_c57e4df4a677abf4bf9dd5c0beca70c4_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_c57e4df4a677abf4bf9dd5c0beca70c4_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-26_c57e4df4a677abf4bf9dd5c0beca70c4_cryptolocker
-
Size
50KB
-
MD5
c57e4df4a677abf4bf9dd5c0beca70c4
-
SHA1
6bc2409c206db5cba1cd7113f16c65f2620b1c43
-
SHA256
d4ffb544ca06b275ef2e20fa723054148335e627eae739ca46abbbfd189debcc
-
SHA512
286b6d4fc6602c26f2b756c087a55b6cde5d97dedb616c0e85dbd73a41b5d57c53bada1863a74642e773c5b4fe4d1aaa11799f87ed585b3ae2e2567c81cd0e28
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9gE1NIo:bIDOw9a0DwitDZzwIo
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-