General
-
Target
2024-02-04_31ebb34623488344999ffc0d94374f54_cryptolocker
-
Size
46KB
-
Sample
240204-aqtzmadbc7
-
MD5
31ebb34623488344999ffc0d94374f54
-
SHA1
ff806145a7b06339f394afc9b0ab414b23cbb831
-
SHA256
3ff8b640a0c543d40a24157fe7a2b2af698866a625a4b7d21495614e85d1b420
-
SHA512
95982ffd30ce10b04453afc787be3938c8ba54c1733e0a5b3f68f2a1c23e7e092419c41626a1733e948806267ebec912552dfe061e766dc7473f196dab5f714e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddZ:bgGYcA/53GAA6y37Q6ddZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_31ebb34623488344999ffc0d94374f54_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-04_31ebb34623488344999ffc0d94374f54_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-04_31ebb34623488344999ffc0d94374f54_cryptolocker
-
Size
46KB
-
MD5
31ebb34623488344999ffc0d94374f54
-
SHA1
ff806145a7b06339f394afc9b0ab414b23cbb831
-
SHA256
3ff8b640a0c543d40a24157fe7a2b2af698866a625a4b7d21495614e85d1b420
-
SHA512
95982ffd30ce10b04453afc787be3938c8ba54c1733e0a5b3f68f2a1c23e7e092419c41626a1733e948806267ebec912552dfe061e766dc7473f196dab5f714e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddZ:bgGYcA/53GAA6y37Q6ddZ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-