General
-
Target
2024-02-20_0be75da12150ef1f543b46b127b6e5c2_cryptolocker
-
Size
41KB
-
Sample
240220-bsajfagf4y
-
MD5
0be75da12150ef1f543b46b127b6e5c2
-
SHA1
8012d75477cc8da8fff7b12c12aefee502e42de5
-
SHA256
13af02c809fa00cc85cfdd700443d3ead7ec6df114ceb74e3bf32219d3d3cf62
-
SHA512
8b747e672a9da8cb1787b1156121b9a5a57be8ec973ccf8efa8c065ab0c9bf7b3520eacf8610fdaa5a63ff9db2fcc645d7e3efeab8ffb175ff6a2a4603db69d6
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFHxzG:79inqyNR/QtOOtEvwDpjBKcmfxa
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_0be75da12150ef1f543b46b127b6e5c2_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-20_0be75da12150ef1f543b46b127b6e5c2_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-20_0be75da12150ef1f543b46b127b6e5c2_cryptolocker
-
Size
41KB
-
MD5
0be75da12150ef1f543b46b127b6e5c2
-
SHA1
8012d75477cc8da8fff7b12c12aefee502e42de5
-
SHA256
13af02c809fa00cc85cfdd700443d3ead7ec6df114ceb74e3bf32219d3d3cf62
-
SHA512
8b747e672a9da8cb1787b1156121b9a5a57be8ec973ccf8efa8c065ab0c9bf7b3520eacf8610fdaa5a63ff9db2fcc645d7e3efeab8ffb175ff6a2a4603db69d6
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFHxzG:79inqyNR/QtOOtEvwDpjBKcmfxa
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-