General
-
Target
2024-02-12_06e02853b974ee0b64c854e41ab19b3a_cryptolocker
-
Size
46KB
-
Sample
240212-j83h6aae57
-
MD5
06e02853b974ee0b64c854e41ab19b3a
-
SHA1
1d3f620619d85ab7efe0073f7f745316c222844d
-
SHA256
d0ff8b4b59dd67c53ee7d3e250fbda6d2f8b147adde6c3a08bd07e377bfb0dc3
-
SHA512
7649e8b5ecd2a6f5801dd6ecfe10784f02861d46731a1a23b3412bbc5d95f545de4621ed9843a8812bb1efd4dda96b0bb644e8f8c58255ec95bc67b03a6e2eef
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvHC:bgGYcA/53GAA6y37nb/C
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_06e02853b974ee0b64c854e41ab19b3a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_06e02853b974ee0b64c854e41ab19b3a_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_06e02853b974ee0b64c854e41ab19b3a_cryptolocker
-
Size
46KB
-
MD5
06e02853b974ee0b64c854e41ab19b3a
-
SHA1
1d3f620619d85ab7efe0073f7f745316c222844d
-
SHA256
d0ff8b4b59dd67c53ee7d3e250fbda6d2f8b147adde6c3a08bd07e377bfb0dc3
-
SHA512
7649e8b5ecd2a6f5801dd6ecfe10784f02861d46731a1a23b3412bbc5d95f545de4621ed9843a8812bb1efd4dda96b0bb644e8f8c58255ec95bc67b03a6e2eef
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvHC:bgGYcA/53GAA6y37nb/C
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-