General
-
Target
2024-02-19_3f06773b5f7e43cd6337dcd77169ab24_cryptolocker
-
Size
41KB
-
Sample
240219-t1betagf74
-
MD5
3f06773b5f7e43cd6337dcd77169ab24
-
SHA1
da7d9d08c339812f9ca67a9fc80bf485fcd87abe
-
SHA256
4691e2f6a5377e12ca13f32bfcbfa1f17f3ed6aacb1f703ab8783b72535cf6e6
-
SHA512
80bf8bd15230f80814adbdf6a88280a0bf261b6d11bfb4dc4779b02678bf11c40a52ca69cedd45736935c9d6b92204cf0a44461688c3a3e8cf49326314b6b693
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMph0d:bc/y2lkF0+BeM
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_3f06773b5f7e43cd6337dcd77169ab24_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_3f06773b5f7e43cd6337dcd77169ab24_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_3f06773b5f7e43cd6337dcd77169ab24_cryptolocker
-
Size
41KB
-
MD5
3f06773b5f7e43cd6337dcd77169ab24
-
SHA1
da7d9d08c339812f9ca67a9fc80bf485fcd87abe
-
SHA256
4691e2f6a5377e12ca13f32bfcbfa1f17f3ed6aacb1f703ab8783b72535cf6e6
-
SHA512
80bf8bd15230f80814adbdf6a88280a0bf261b6d11bfb4dc4779b02678bf11c40a52ca69cedd45736935c9d6b92204cf0a44461688c3a3e8cf49326314b6b693
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMph0d:bc/y2lkF0+BeM
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-