General
-
Target
2024-02-13_36c9651847dbd0d2565d7f18f8ccdf0a_cryptolocker
-
Size
93KB
-
Sample
240213-f97bysfe7x
-
MD5
36c9651847dbd0d2565d7f18f8ccdf0a
-
SHA1
9c4abe2980cc515dd857fc3e3f03e87bb273c91f
-
SHA256
0676d28b9758ba630e1ecc574c7c512320a8146e761393654943c6c3cbdc5f31
-
SHA512
08df4399fae5a39c509acde8d0dd727fd84c9e378c22ecde519bbb965162bfece73b39648220b1fe58e33471bbfe20dc9ec14d906428194280b75ccdb4ccabe0
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNC5:26a+2OtEvwDpjtzW
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_36c9651847dbd0d2565d7f18f8ccdf0a_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-13_36c9651847dbd0d2565d7f18f8ccdf0a_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_36c9651847dbd0d2565d7f18f8ccdf0a_cryptolocker
-
Size
93KB
-
MD5
36c9651847dbd0d2565d7f18f8ccdf0a
-
SHA1
9c4abe2980cc515dd857fc3e3f03e87bb273c91f
-
SHA256
0676d28b9758ba630e1ecc574c7c512320a8146e761393654943c6c3cbdc5f31
-
SHA512
08df4399fae5a39c509acde8d0dd727fd84c9e378c22ecde519bbb965162bfece73b39648220b1fe58e33471bbfe20dc9ec14d906428194280b75ccdb4ccabe0
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNC5:26a+2OtEvwDpjtzW
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-