General
-
Target
2024-02-11_5b64003c0d2c9b72153fb10ef5917332_cryptolocker
-
Size
48KB
-
Sample
240211-yjcnrsch82
-
MD5
5b64003c0d2c9b72153fb10ef5917332
-
SHA1
4f6feaeeba35d851e31ff1183bb5cf272c2748d8
-
SHA256
477990869129aedb22f6cb5f8fa8d5938751d94d1bb6c84abaa36a5d926d4714
-
SHA512
a141b735d9b3ca210be3c0c8e21f045d5b77f8550bfc0c522790c1c83105d564f8c97a3c07656077e45b19e674dcb90a0550c4083795b2d4f4441ad4a758e6c5
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSr:bgGYcA/53GAA6y37Q6dI+d5D
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-11_5b64003c0d2c9b72153fb10ef5917332_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-11_5b64003c0d2c9b72153fb10ef5917332_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-11_5b64003c0d2c9b72153fb10ef5917332_cryptolocker
-
Size
48KB
-
MD5
5b64003c0d2c9b72153fb10ef5917332
-
SHA1
4f6feaeeba35d851e31ff1183bb5cf272c2748d8
-
SHA256
477990869129aedb22f6cb5f8fa8d5938751d94d1bb6c84abaa36a5d926d4714
-
SHA512
a141b735d9b3ca210be3c0c8e21f045d5b77f8550bfc0c522790c1c83105d564f8c97a3c07656077e45b19e674dcb90a0550c4083795b2d4f4441ad4a758e6c5
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSr:bgGYcA/53GAA6y37Q6dI+d5D
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-