General
-
Target
2024-02-20_d5b33dd1d7b5ea09a3953ae8105a8cb9_cryptolocker
-
Size
99KB
-
Sample
240220-gx3zfadc45
-
MD5
d5b33dd1d7b5ea09a3953ae8105a8cb9
-
SHA1
bc47b72b3cefe149937dd28d53e824d0d7f5b76e
-
SHA256
f47746d1db9cdfa47c27a776df13b873c2ab7a4d5527ed0242ef4a375f139a3a
-
SHA512
357e58e7136e87839b680f82965d8d43c0317860ecfafcdaef93b76d6377234bb983cb0416fff8b7b5acab0a4dd1d151eab24d140b3d008781cd0ea97d6a98ee
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpQbCJjR:V6a+pOtEvwDpjtzu
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_d5b33dd1d7b5ea09a3953ae8105a8cb9_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_d5b33dd1d7b5ea09a3953ae8105a8cb9_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-20_d5b33dd1d7b5ea09a3953ae8105a8cb9_cryptolocker
-
Size
99KB
-
MD5
d5b33dd1d7b5ea09a3953ae8105a8cb9
-
SHA1
bc47b72b3cefe149937dd28d53e824d0d7f5b76e
-
SHA256
f47746d1db9cdfa47c27a776df13b873c2ab7a4d5527ed0242ef4a375f139a3a
-
SHA512
357e58e7136e87839b680f82965d8d43c0317860ecfafcdaef93b76d6377234bb983cb0416fff8b7b5acab0a4dd1d151eab24d140b3d008781cd0ea97d6a98ee
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpQbCJjR:V6a+pOtEvwDpjtzu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-