General
-
Target
2024-02-17_17faf6f5c3939c9d8aa966ae7095227e_cryptolocker
-
Size
49KB
-
Sample
240217-2dmhkabh24
-
MD5
17faf6f5c3939c9d8aa966ae7095227e
-
SHA1
d2b6d61957a795437a7b01ae54e8211429dba674
-
SHA256
d3e6f23cc701a2a587fa610fb000a38dc7f48e9809536b19177d6936543adcb4
-
SHA512
6957b39d1a938f246d53aeafaf8ee7d9769c917728da5b4716ca6e093e0c39f47f3127bcefa2ebace84bcd320f929b4004df58f7bee8fa2f1d2c25e485f4a6dc
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxtn:X6QFElP6n+gJBMOtEvwDpjBtExV
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_17faf6f5c3939c9d8aa966ae7095227e_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_17faf6f5c3939c9d8aa966ae7095227e_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_17faf6f5c3939c9d8aa966ae7095227e_cryptolocker
-
Size
49KB
-
MD5
17faf6f5c3939c9d8aa966ae7095227e
-
SHA1
d2b6d61957a795437a7b01ae54e8211429dba674
-
SHA256
d3e6f23cc701a2a587fa610fb000a38dc7f48e9809536b19177d6936543adcb4
-
SHA512
6957b39d1a938f246d53aeafaf8ee7d9769c917728da5b4716ca6e093e0c39f47f3127bcefa2ebace84bcd320f929b4004df58f7bee8fa2f1d2c25e485f4a6dc
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxtn:X6QFElP6n+gJBMOtEvwDpjBtExV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-