General
-
Target
2024-02-13_9f2f0babab9aee79996108f0380a7a71_cryptolocker
-
Size
32KB
-
Sample
240213-1ppxdshg8y
-
MD5
9f2f0babab9aee79996108f0380a7a71
-
SHA1
f720b6399d148d61cac8ddd1326b6f4630311730
-
SHA256
299a3c1c6f46c79ed5a80613d7e977420ceca56c029c8b6b829dacaca3e52e21
-
SHA512
db80dcdec4e3a7326fcd339c968b07a7d1267cd3d2b0e07e842b1bb8de07be61977b577a6a67aac690cf726d147e3421355dafcef42acf618545f5be478717db
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RwFt6:b7o/2n1TCraU6GD1a4Xt9bRwS
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_9f2f0babab9aee79996108f0380a7a71_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_9f2f0babab9aee79996108f0380a7a71_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-13_9f2f0babab9aee79996108f0380a7a71_cryptolocker
-
Size
32KB
-
MD5
9f2f0babab9aee79996108f0380a7a71
-
SHA1
f720b6399d148d61cac8ddd1326b6f4630311730
-
SHA256
299a3c1c6f46c79ed5a80613d7e977420ceca56c029c8b6b829dacaca3e52e21
-
SHA512
db80dcdec4e3a7326fcd339c968b07a7d1267cd3d2b0e07e842b1bb8de07be61977b577a6a67aac690cf726d147e3421355dafcef42acf618545f5be478717db
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RwFt6:b7o/2n1TCraU6GD1a4Xt9bRwS
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-