General
-
Target
2024-01-27_ee3516230249c5016515d07bdc586a7f_cryptolocker
-
Size
44KB
-
Sample
240127-a3qsqshgc4
-
MD5
ee3516230249c5016515d07bdc586a7f
-
SHA1
d1b265d14bb1ac8fb7b6258284348e6394fcd728
-
SHA256
439861743d2e06871e11e0f202c75e944bc8516819c6d868812e86883bad3de8
-
SHA512
bd68ee0f16ebd88469735f910e1b0aa82dd03935fd578a9cd2e98a80bf0d1b64fbd4d320d5e4ec70174819389280cdfa49de79ab4f997d1517e5c24264c61c38
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpbA6q/:79mqyNhQMOtEvwDpjBzck96A
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_ee3516230249c5016515d07bdc586a7f_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-27_ee3516230249c5016515d07bdc586a7f_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-27_ee3516230249c5016515d07bdc586a7f_cryptolocker
-
Size
44KB
-
MD5
ee3516230249c5016515d07bdc586a7f
-
SHA1
d1b265d14bb1ac8fb7b6258284348e6394fcd728
-
SHA256
439861743d2e06871e11e0f202c75e944bc8516819c6d868812e86883bad3de8
-
SHA512
bd68ee0f16ebd88469735f910e1b0aa82dd03935fd578a9cd2e98a80bf0d1b64fbd4d320d5e4ec70174819389280cdfa49de79ab4f997d1517e5c24264c61c38
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpbA6q/:79mqyNhQMOtEvwDpjBzck96A
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-