General
-
Target
2024-02-17_8d40df93e712d5605bb25cf4ea477b73_cryptolocker
-
Size
60KB
-
Sample
240217-sye5jsgc3v
-
MD5
8d40df93e712d5605bb25cf4ea477b73
-
SHA1
95097d771631df7b0de6622e35bb61dc64d59093
-
SHA256
16ce6c2d93a27d1b49da26169b427db9f9a55573f6969694fc2bf0b81df427d2
-
SHA512
f925511c0c759ed7f97df4ec76c6b3578d46b0ca99949b92fbd62d67b89e4d6f738d63ae346745dcbd04cc98135f46f94ef3bbe08e4813804735495bcb905a4c
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCY8EQMjpi/Wpi3B3URiLnuoUwUsfqB1l:vj+jsMQMOtEvwDpj5Hy7B3gG8xzUc
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_8d40df93e712d5605bb25cf4ea477b73_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_8d40df93e712d5605bb25cf4ea477b73_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-17_8d40df93e712d5605bb25cf4ea477b73_cryptolocker
-
Size
60KB
-
MD5
8d40df93e712d5605bb25cf4ea477b73
-
SHA1
95097d771631df7b0de6622e35bb61dc64d59093
-
SHA256
16ce6c2d93a27d1b49da26169b427db9f9a55573f6969694fc2bf0b81df427d2
-
SHA512
f925511c0c759ed7f97df4ec76c6b3578d46b0ca99949b92fbd62d67b89e4d6f738d63ae346745dcbd04cc98135f46f94ef3bbe08e4813804735495bcb905a4c
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCY8EQMjpi/Wpi3B3URiLnuoUwUsfqB1l:vj+jsMQMOtEvwDpj5Hy7B3gG8xzUc
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-