General
-
Target
2024-02-14_daf5914f5dbcea41441cf1dcbf108bb9_cryptolocker
-
Size
44KB
-
Sample
240214-ezl3lagh7x
-
MD5
daf5914f5dbcea41441cf1dcbf108bb9
-
SHA1
cbbdf53560ef0c444db23d29f70259f5bb9a21f1
-
SHA256
68de31b42ed3fe49719af60f21a6ef67ccbf5d6062bf3d857ba2257166b6cb4d
-
SHA512
e5edcec4d9c18d848e78e0f442397684ba8ad27df45dd798acbe55ebcf7a1d9f901317fe935ffb862f1e57bf6e1c7e07151f1eb36ec2af4668a6a79cd03d8a42
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphedq:bc/y2lkF0+BeZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_daf5914f5dbcea41441cf1dcbf108bb9_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_daf5914f5dbcea41441cf1dcbf108bb9_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-14_daf5914f5dbcea41441cf1dcbf108bb9_cryptolocker
-
Size
44KB
-
MD5
daf5914f5dbcea41441cf1dcbf108bb9
-
SHA1
cbbdf53560ef0c444db23d29f70259f5bb9a21f1
-
SHA256
68de31b42ed3fe49719af60f21a6ef67ccbf5d6062bf3d857ba2257166b6cb4d
-
SHA512
e5edcec4d9c18d848e78e0f442397684ba8ad27df45dd798acbe55ebcf7a1d9f901317fe935ffb862f1e57bf6e1c7e07151f1eb36ec2af4668a6a79cd03d8a42
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphedq:bc/y2lkF0+BeZ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-