General
-
Target
2024-02-19_b14b40af5402882e3b3d9b01d762da18_cryptolocker
-
Size
35KB
-
Sample
240219-efjhcshf65
-
MD5
b14b40af5402882e3b3d9b01d762da18
-
SHA1
41b26d07692274ed468aa4d3824590d23b0c8b12
-
SHA256
570aeb950430c19f3ab771889813253f2fa3e78dc55fecd1222ec816712dbd9c
-
SHA512
eeee4e9859680ffc1f5131304563ea937a8d450c46118c5bdd2b2f440e77f05df203ff0beb8bb8004deef6cf99307de88554cf594ea02397c91bbc6f0a90f864
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18uuuW:btB9g/WItCSsAGjX7e9NABW
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_b14b40af5402882e3b3d9b01d762da18_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_b14b40af5402882e3b3d9b01d762da18_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_b14b40af5402882e3b3d9b01d762da18_cryptolocker
-
Size
35KB
-
MD5
b14b40af5402882e3b3d9b01d762da18
-
SHA1
41b26d07692274ed468aa4d3824590d23b0c8b12
-
SHA256
570aeb950430c19f3ab771889813253f2fa3e78dc55fecd1222ec816712dbd9c
-
SHA512
eeee4e9859680ffc1f5131304563ea937a8d450c46118c5bdd2b2f440e77f05df203ff0beb8bb8004deef6cf99307de88554cf594ea02397c91bbc6f0a90f864
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg18uuuW:btB9g/WItCSsAGjX7e9NABW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-