General
-
Target
2024-02-14_fc2bf02250cdf2c00c61d83a8f570e42_cryptolocker
-
Size
57KB
-
Sample
240214-wfbk7aab57
-
MD5
fc2bf02250cdf2c00c61d83a8f570e42
-
SHA1
26cbe43bfa284fdd974540e50485bb922750b5bc
-
SHA256
03f949818d3c49a3f63f820e93bacb54e11af32781c48b06d381e49cbd0149ad
-
SHA512
85992589ffc5531c9266f141465782b059aa4e7cb8f03fa055bf74f28d400a62f2bf97d27c8f8ac173281dfeb6113e1da74cf14e2255ebdcddc8eb323be0ca9a
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20PbF:xj+VGMOtEvwDpjubEgV20DF
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_fc2bf02250cdf2c00c61d83a8f570e42_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_fc2bf02250cdf2c00c61d83a8f570e42_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-14_fc2bf02250cdf2c00c61d83a8f570e42_cryptolocker
-
Size
57KB
-
MD5
fc2bf02250cdf2c00c61d83a8f570e42
-
SHA1
26cbe43bfa284fdd974540e50485bb922750b5bc
-
SHA256
03f949818d3c49a3f63f820e93bacb54e11af32781c48b06d381e49cbd0149ad
-
SHA512
85992589ffc5531c9266f141465782b059aa4e7cb8f03fa055bf74f28d400a62f2bf97d27c8f8ac173281dfeb6113e1da74cf14e2255ebdcddc8eb323be0ca9a
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Goi20PbF:xj+VGMOtEvwDpjubEgV20DF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-