General
-
Target
2024-02-11_1e58a4c01e67a544395235880cea115a_cryptolocker
-
Size
32KB
-
Sample
240211-y7n2psdb68
-
MD5
1e58a4c01e67a544395235880cea115a
-
SHA1
a0537560dc63e5a6dc8ad894b3414a2d4f5d91b6
-
SHA256
95575fd21d194f9906a84d2a43579f8f0092d4170af124be5d5f4f04e7492f6b
-
SHA512
7e4927bd714139527beb3c303f4f55983db3baaf89d258ccfe0de107cc66571fd59cd7628084862bf7f0bc161df86b67d1433b63ff7a08c51bd1874fc41c9d25
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q4v:b7o/2n1TCraU6GD1a4Xt9bRU64v
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-11_1e58a4c01e67a544395235880cea115a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-11_1e58a4c01e67a544395235880cea115a_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-11_1e58a4c01e67a544395235880cea115a_cryptolocker
-
Size
32KB
-
MD5
1e58a4c01e67a544395235880cea115a
-
SHA1
a0537560dc63e5a6dc8ad894b3414a2d4f5d91b6
-
SHA256
95575fd21d194f9906a84d2a43579f8f0092d4170af124be5d5f4f04e7492f6b
-
SHA512
7e4927bd714139527beb3c303f4f55983db3baaf89d258ccfe0de107cc66571fd59cd7628084862bf7f0bc161df86b67d1433b63ff7a08c51bd1874fc41c9d25
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q4v:b7o/2n1TCraU6GD1a4Xt9bRU64v
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-