General
-
Target
2024-02-12_de7fcafd9790761ae9a576c061f5c199_cryptolocker
-
Size
42KB
-
Sample
240212-b8rgwseh6y
-
MD5
de7fcafd9790761ae9a576c061f5c199
-
SHA1
f4984d37ed9d3ebe442455527f0396bd56f2c724
-
SHA256
dc6d0fc99d3da8bead5645cbb535cf289168e15e4abf9c09f58bb1e91912f9e5
-
SHA512
32888628bf244f234e90e9df01a1c103b24713ef0c21b8f1dbfedcc09064f35812e48c164444aa36c584d14e1d4a62944b4b1bcececdb765e883eee328acc45f
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq03:bc/y2lkF0+Bja
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_de7fcafd9790761ae9a576c061f5c199_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_de7fcafd9790761ae9a576c061f5c199_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_de7fcafd9790761ae9a576c061f5c199_cryptolocker
-
Size
42KB
-
MD5
de7fcafd9790761ae9a576c061f5c199
-
SHA1
f4984d37ed9d3ebe442455527f0396bd56f2c724
-
SHA256
dc6d0fc99d3da8bead5645cbb535cf289168e15e4abf9c09f58bb1e91912f9e5
-
SHA512
32888628bf244f234e90e9df01a1c103b24713ef0c21b8f1dbfedcc09064f35812e48c164444aa36c584d14e1d4a62944b4b1bcececdb765e883eee328acc45f
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq03:bc/y2lkF0+Bja
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-