General
-
Target
2024-01-29_410b55e9a5caefde8b1975d0c4fea592_cryptolocker
-
Size
127KB
-
Sample
240129-dz4f7sggh9
-
MD5
410b55e9a5caefde8b1975d0c4fea592
-
SHA1
fb07a5d059b457cd90974a6051cd742297e291e9
-
SHA256
1fda92611d7b6e21422aacef85b0db4c86dc6eff9a7c43e60bb72754f2cfec25
-
SHA512
127354ef1f8f748f65154cb162e7ea4c62efdeaba698634e930baaa0c4ddc30c80a71422e159f74b06a737c80f2eae427f06355ab5b33214000ed3ab05171544
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//jx:vCjsIOtEvwDpj5H9YvQd2Rr
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_410b55e9a5caefde8b1975d0c4fea592_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-29_410b55e9a5caefde8b1975d0c4fea592_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-29_410b55e9a5caefde8b1975d0c4fea592_cryptolocker
-
Size
127KB
-
MD5
410b55e9a5caefde8b1975d0c4fea592
-
SHA1
fb07a5d059b457cd90974a6051cd742297e291e9
-
SHA256
1fda92611d7b6e21422aacef85b0db4c86dc6eff9a7c43e60bb72754f2cfec25
-
SHA512
127354ef1f8f748f65154cb162e7ea4c62efdeaba698634e930baaa0c4ddc30c80a71422e159f74b06a737c80f2eae427f06355ab5b33214000ed3ab05171544
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//jx:vCjsIOtEvwDpj5H9YvQd2Rr
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-