General
-
Target
2024-02-17_168f4f7489cabbbba74adf50f395cc7b_cryptolocker
-
Size
35KB
-
Sample
240217-pl8dsaef6z
-
MD5
168f4f7489cabbbba74adf50f395cc7b
-
SHA1
0938820878e3e57cd7a3644b7645c82ea1e08f36
-
SHA256
fb7e189dd3954f10a0e20047fa56e919b1290e8aaf72076370fa7f0ddf0cb3fa
-
SHA512
e683170e67d7c589bf203ed87759ddcfb4716d3b1bc7927fff24c0b6e2224d15d0b03c6d8aa9118d3981c511381a86e277e1b73d6caba89ae5c0c14a5e8167dd
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0j:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XB
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_168f4f7489cabbbba74adf50f395cc7b_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_168f4f7489cabbbba74adf50f395cc7b_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-17_168f4f7489cabbbba74adf50f395cc7b_cryptolocker
-
Size
35KB
-
MD5
168f4f7489cabbbba74adf50f395cc7b
-
SHA1
0938820878e3e57cd7a3644b7645c82ea1e08f36
-
SHA256
fb7e189dd3954f10a0e20047fa56e919b1290e8aaf72076370fa7f0ddf0cb3fa
-
SHA512
e683170e67d7c589bf203ed87759ddcfb4716d3b1bc7927fff24c0b6e2224d15d0b03c6d8aa9118d3981c511381a86e277e1b73d6caba89ae5c0c14a5e8167dd
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0j:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XB
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-