General
-
Target
2024-02-03_23146128a3c61237876a6977e3e6e000_cryptolocker
-
Size
40KB
-
Sample
240203-dyxbhaacbj
-
MD5
23146128a3c61237876a6977e3e6e000
-
SHA1
9987deeb25ec2a0dbd077cfe26d9bb43a5cab39c
-
SHA256
d559a2c884b2fc036f91c41210612245e54a25751ddd9a5effbcb22099398df2
-
SHA512
3779d85ffc7a2a4606597f5e30ff7640ec5589bc1190b310991e69e35376c7e853ccfbbbce1aa9dcaccbe810b50afa2556d94ab51bc77f213f35aa9128ed643f
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51jpN:bc/y2lm6Y0AqJ51VN
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_23146128a3c61237876a6977e3e6e000_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_23146128a3c61237876a6977e3e6e000_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-03_23146128a3c61237876a6977e3e6e000_cryptolocker
-
Size
40KB
-
MD5
23146128a3c61237876a6977e3e6e000
-
SHA1
9987deeb25ec2a0dbd077cfe26d9bb43a5cab39c
-
SHA256
d559a2c884b2fc036f91c41210612245e54a25751ddd9a5effbcb22099398df2
-
SHA512
3779d85ffc7a2a4606597f5e30ff7640ec5589bc1190b310991e69e35376c7e853ccfbbbce1aa9dcaccbe810b50afa2556d94ab51bc77f213f35aa9128ed643f
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51jpN:bc/y2lm6Y0AqJ51VN
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-