General
-
Target
2024-02-03_f164130b08ee2d5c4cebf8c392c0c834_cryptolocker
-
Size
51KB
-
Sample
240203-v57jgsefg9
-
MD5
f164130b08ee2d5c4cebf8c392c0c834
-
SHA1
dddc7357cc27c4331664ce0d5f9f9a3ee143b4ac
-
SHA256
f182bd4512cff1fe5029190d062d4a798770c7c2f2c8682b3ca92c72569f07e1
-
SHA512
5a017bf96c0878e06ad119fb14ccbe9ef4de7fed29d604d478f9787703861bc0aeeec5a9a390a8fce72218383acd5b40a4a8fd7b53b3555314ff50ec02735885
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9SVMT:bIDOw9a0DwitDZz16T
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_f164130b08ee2d5c4cebf8c392c0c834_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_f164130b08ee2d5c4cebf8c392c0c834_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-03_f164130b08ee2d5c4cebf8c392c0c834_cryptolocker
-
Size
51KB
-
MD5
f164130b08ee2d5c4cebf8c392c0c834
-
SHA1
dddc7357cc27c4331664ce0d5f9f9a3ee143b4ac
-
SHA256
f182bd4512cff1fe5029190d062d4a798770c7c2f2c8682b3ca92c72569f07e1
-
SHA512
5a017bf96c0878e06ad119fb14ccbe9ef4de7fed29d604d478f9787703861bc0aeeec5a9a390a8fce72218383acd5b40a4a8fd7b53b3555314ff50ec02735885
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9SVMT:bIDOw9a0DwitDZz16T
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-