General
-
Target
2024-02-17_5dacbc213af9e39091941de04201c944_cryptolocker
-
Size
32KB
-
Sample
240217-lk6a9add5s
-
MD5
5dacbc213af9e39091941de04201c944
-
SHA1
1a1c781c9be8af09734bd5d5fc6d49862150296d
-
SHA256
852dc5f4f299ffe71e0537d041a093521d866daff64e548d2e604e36f71eae21
-
SHA512
ae31fe25504f232b5cd809a8a2f536e23e249680059b2f0a05b79cca6541c567ae6ddc535a2cb1661f499269ad860b3408308cf8e2702159db08d2ba78bb71de
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9JYUGVZL:bAvJCYOOvbRPDEgXRcuM9HGVZL
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_5dacbc213af9e39091941de04201c944_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-17_5dacbc213af9e39091941de04201c944_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_5dacbc213af9e39091941de04201c944_cryptolocker
-
Size
32KB
-
MD5
5dacbc213af9e39091941de04201c944
-
SHA1
1a1c781c9be8af09734bd5d5fc6d49862150296d
-
SHA256
852dc5f4f299ffe71e0537d041a093521d866daff64e548d2e604e36f71eae21
-
SHA512
ae31fe25504f232b5cd809a8a2f536e23e249680059b2f0a05b79cca6541c567ae6ddc535a2cb1661f499269ad860b3408308cf8e2702159db08d2ba78bb71de
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9JYUGVZL:bAvJCYOOvbRPDEgXRcuM9HGVZL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-