General
-
Target
2024-02-04_a7d3d361f208cb8223adf3e5327849b8_cryptolocker
-
Size
82KB
-
Sample
240204-pv673shea7
-
MD5
a7d3d361f208cb8223adf3e5327849b8
-
SHA1
c789eedae822ebb4e233067bb5748ed381d28b54
-
SHA256
49bb383d6ad27314d9b6898f4713a40878e42f91c95c02ab72b5237d68d3c856
-
SHA512
54422b570d6bb66584a5800d93fc988d383913df71526063cb5aef769a0287d5b72aeaefca201c0af248a53f4b0ccfdd64d166b03215b06ba6ee24c861e48657
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFHFb:V6QFElP6n+gMQMOtEvwDpjyaLccVNlN
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_a7d3d361f208cb8223adf3e5327849b8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-04_a7d3d361f208cb8223adf3e5327849b8_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-04_a7d3d361f208cb8223adf3e5327849b8_cryptolocker
-
Size
82KB
-
MD5
a7d3d361f208cb8223adf3e5327849b8
-
SHA1
c789eedae822ebb4e233067bb5748ed381d28b54
-
SHA256
49bb383d6ad27314d9b6898f4713a40878e42f91c95c02ab72b5237d68d3c856
-
SHA512
54422b570d6bb66584a5800d93fc988d383913df71526063cb5aef769a0287d5b72aeaefca201c0af248a53f4b0ccfdd64d166b03215b06ba6ee24c861e48657
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFHFb:V6QFElP6n+gMQMOtEvwDpjyaLccVNlN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-