General
-
Target
2024-02-14_acead2b433f1a84389c04925ece11cfc_cryptolocker
-
Size
41KB
-
Sample
240214-pefeesaa7t
-
MD5
acead2b433f1a84389c04925ece11cfc
-
SHA1
bcbb03c4f99cbea4ca8c6292b6dd13614acc175d
-
SHA256
d5c8504b4703d11121f5b4bb384b6744003ef1e977c54c78248261a3ef064118
-
SHA512
fbf65a93af2cc0901380a3349052524fe1bacffdb3b8045425e1dec22f1e98519a83d3e7c19d7bb98ac6a54b9c295df75b6b94d32c53c4e6c50910657a6fd118
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAC:b/pYayGig5HjS3NPAC
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_acead2b433f1a84389c04925ece11cfc_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_acead2b433f1a84389c04925ece11cfc_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-14_acead2b433f1a84389c04925ece11cfc_cryptolocker
-
Size
41KB
-
MD5
acead2b433f1a84389c04925ece11cfc
-
SHA1
bcbb03c4f99cbea4ca8c6292b6dd13614acc175d
-
SHA256
d5c8504b4703d11121f5b4bb384b6744003ef1e977c54c78248261a3ef064118
-
SHA512
fbf65a93af2cc0901380a3349052524fe1bacffdb3b8045425e1dec22f1e98519a83d3e7c19d7bb98ac6a54b9c295df75b6b94d32c53c4e6c50910657a6fd118
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAC:b/pYayGig5HjS3NPAC
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-