General
-
Target
2024-02-13_c8c1a99236a4948e22d2cdc0b0e5ffec_cryptolocker
-
Size
36KB
-
Sample
240213-gw843aah4z
-
MD5
c8c1a99236a4948e22d2cdc0b0e5ffec
-
SHA1
b7fc0d4fa691a9d69fb52f0a42f70ce560b59a7d
-
SHA256
728608f35e20ae7f0c7952b39e7a51458a864f43b8a44055b525d4b9ef325259
-
SHA512
204fb06fe0493d5a9e7f4882c08b048b2e9d0036b6461ea172bc42755c12eb65d7c8337c338f3ef0d774a2e1166c64e07853782cefdb348dad6089b07ccada7c
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3q:bxNrC7kYo1Fxf3s06go
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_c8c1a99236a4948e22d2cdc0b0e5ffec_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_c8c1a99236a4948e22d2cdc0b0e5ffec_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_c8c1a99236a4948e22d2cdc0b0e5ffec_cryptolocker
-
Size
36KB
-
MD5
c8c1a99236a4948e22d2cdc0b0e5ffec
-
SHA1
b7fc0d4fa691a9d69fb52f0a42f70ce560b59a7d
-
SHA256
728608f35e20ae7f0c7952b39e7a51458a864f43b8a44055b525d4b9ef325259
-
SHA512
204fb06fe0493d5a9e7f4882c08b048b2e9d0036b6461ea172bc42755c12eb65d7c8337c338f3ef0d774a2e1166c64e07853782cefdb348dad6089b07ccada7c
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3q:bxNrC7kYo1Fxf3s06go
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-