General
-
Target
2024-02-14_e400c45e20bd0ea114978ec16c4165a4_cryptolocker
-
Size
35KB
-
Sample
240214-eked7shf46
-
MD5
e400c45e20bd0ea114978ec16c4165a4
-
SHA1
c896b0c080f6dea2f621be2192239f8a29117892
-
SHA256
1dd0438a6cc6a0c40b1db5ab20efb113dc6c2207200b00a70a193e7074003cf0
-
SHA512
f4b9f6264478880ae6143e17eeeac129e5bcdb866f84d849c0e605b9cc5d2fd866297025cc95fa459d4f96162a9af980c80a3b438100c943d55fb86b98f5b73e
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18IYW:btB9g/WItCSsAGjX7e9NzW
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_e400c45e20bd0ea114978ec16c4165a4_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_e400c45e20bd0ea114978ec16c4165a4_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-14_e400c45e20bd0ea114978ec16c4165a4_cryptolocker
-
Size
35KB
-
MD5
e400c45e20bd0ea114978ec16c4165a4
-
SHA1
c896b0c080f6dea2f621be2192239f8a29117892
-
SHA256
1dd0438a6cc6a0c40b1db5ab20efb113dc6c2207200b00a70a193e7074003cf0
-
SHA512
f4b9f6264478880ae6143e17eeeac129e5bcdb866f84d849c0e605b9cc5d2fd866297025cc95fa459d4f96162a9af980c80a3b438100c943d55fb86b98f5b73e
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18IYW:btB9g/WItCSsAGjX7e9NzW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-