General
-
Target
2024-01-28_56de854992cb360d270d9d0b67e14e6c_cryptolocker
-
Size
48KB
-
Sample
240128-y8xp8sbahr
-
MD5
56de854992cb360d270d9d0b67e14e6c
-
SHA1
fdac5d82a29c2e5d0427ea52938dad8701979c60
-
SHA256
a3418d76ce4705ac9e8b96006b56e39c4bf96df75bf389829b1dec564c4440d0
-
SHA512
d241843cf853cbf490a21c9e3e2938c7b437ba50c8ce266cf0ca6b3af71ef46674dd3f750b4318658f323e38177e77e6ea2f975ee0fde8221a22d60a87fb99d1
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxe:X6QFElP6n+gJBMOtEvwDpjBtExe
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_56de854992cb360d270d9d0b67e14e6c_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-28_56de854992cb360d270d9d0b67e14e6c_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_56de854992cb360d270d9d0b67e14e6c_cryptolocker
-
Size
48KB
-
MD5
56de854992cb360d270d9d0b67e14e6c
-
SHA1
fdac5d82a29c2e5d0427ea52938dad8701979c60
-
SHA256
a3418d76ce4705ac9e8b96006b56e39c4bf96df75bf389829b1dec564c4440d0
-
SHA512
d241843cf853cbf490a21c9e3e2938c7b437ba50c8ce266cf0ca6b3af71ef46674dd3f750b4318658f323e38177e77e6ea2f975ee0fde8221a22d60a87fb99d1
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxe:X6QFElP6n+gJBMOtEvwDpjBtExe
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-