General
-
Target
2024-02-21_178e818d6224f801f37204386b56825f_cryptolocker
-
Size
31KB
-
Sample
240221-qn1x6agd95
-
MD5
178e818d6224f801f37204386b56825f
-
SHA1
3c2d80a0fb4c5f8b1b170e2f892e7bfd21054636
-
SHA256
a010d7fb8d84e8e5448ff10d561845d487ae1b0210bfe90de17aa5056a6cb349
-
SHA512
67654c9178d2f9947755d79aebf2a65ab8500c9a55ba074603a7124d490ca43eeac1e6305d4a4459e279ee35cb5cd2a29ae993d00307738e8761e6ca480bb131
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0a2yqA:b7o/2n1TCraU6GD1a4Xt9R0a7qA
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_178e818d6224f801f37204386b56825f_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-21_178e818d6224f801f37204386b56825f_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_178e818d6224f801f37204386b56825f_cryptolocker
-
Size
31KB
-
MD5
178e818d6224f801f37204386b56825f
-
SHA1
3c2d80a0fb4c5f8b1b170e2f892e7bfd21054636
-
SHA256
a010d7fb8d84e8e5448ff10d561845d487ae1b0210bfe90de17aa5056a6cb349
-
SHA512
67654c9178d2f9947755d79aebf2a65ab8500c9a55ba074603a7124d490ca43eeac1e6305d4a4459e279ee35cb5cd2a29ae993d00307738e8761e6ca480bb131
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0a2yqA:b7o/2n1TCraU6GD1a4Xt9R0a7qA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-