General
-
Target
2024-02-18_9197785aa048e831855d030d48915e88_cryptolocker
-
Size
42KB
-
Sample
240218-mphlesgh8s
-
MD5
9197785aa048e831855d030d48915e88
-
SHA1
a10ab18c4995177a92c11bb059f58601769fbbee
-
SHA256
246026db3209fd5170cd328641b341c2f382534c265f2d12d35ec63e69824aff
-
SHA512
7cf9ca477a9d55ece1d835958a837f6291f99fc0db3fe14e986eeee75f595987854f1b5d0cb35174b0f5159f59e825534881f5e223a625a805a6bda59bbddcee
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqbo3e:bc/y2lkF0+BjUu
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_9197785aa048e831855d030d48915e88_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_9197785aa048e831855d030d48915e88_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-18_9197785aa048e831855d030d48915e88_cryptolocker
-
Size
42KB
-
MD5
9197785aa048e831855d030d48915e88
-
SHA1
a10ab18c4995177a92c11bb059f58601769fbbee
-
SHA256
246026db3209fd5170cd328641b341c2f382534c265f2d12d35ec63e69824aff
-
SHA512
7cf9ca477a9d55ece1d835958a837f6291f99fc0db3fe14e986eeee75f595987854f1b5d0cb35174b0f5159f59e825534881f5e223a625a805a6bda59bbddcee
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqbo3e:bc/y2lkF0+BjUu
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-