General
-
Target
2024-02-17_95238c544af7dbaa94a6264fde1b22db_cryptolocker
-
Size
35KB
-
Sample
240217-3j847acc63
-
MD5
95238c544af7dbaa94a6264fde1b22db
-
SHA1
cbe328978e277039100c1c744ccf7b897254c6af
-
SHA256
5ffe3b588f2b6f90f8a3a20a708eb26a10c0bad2b7e64cf198ce2a424319e587
-
SHA512
63d1b02378ca5de5b79e5c3437756859245770b889155994e0e8756b170ed75ee37e364701b42495f4e0ad3bdda317ab147489e81a5f0ce08f7d07d5f645c988
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wmkpD:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XP
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_95238c544af7dbaa94a6264fde1b22db_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_95238c544af7dbaa94a6264fde1b22db_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-17_95238c544af7dbaa94a6264fde1b22db_cryptolocker
-
Size
35KB
-
MD5
95238c544af7dbaa94a6264fde1b22db
-
SHA1
cbe328978e277039100c1c744ccf7b897254c6af
-
SHA256
5ffe3b588f2b6f90f8a3a20a708eb26a10c0bad2b7e64cf198ce2a424319e587
-
SHA512
63d1b02378ca5de5b79e5c3437756859245770b889155994e0e8756b170ed75ee37e364701b42495f4e0ad3bdda317ab147489e81a5f0ce08f7d07d5f645c988
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wmkpD:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-