General
-
Target
2024-02-21_57f8dd342d7d5c533aa2ab608c2a3d4c_cryptolocker
-
Size
60KB
-
Sample
240221-wexf9sda94
-
MD5
57f8dd342d7d5c533aa2ab608c2a3d4c
-
SHA1
fd6bfba5e804a0e197841c327087304ea627d754
-
SHA256
27f3027d489037d3d3e1cfcae2a883572a66a1dbd0113ded221327b7b2cab20a
-
SHA512
3280f5bc81b683854dc8c45a316d05fcfb6afbe5f757d7a5ae601a0a12a0e281826393b1ca05ef4b4c96d4f0127a3ea39e65db68b45ca0001fcf3c426ee7d5cb
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHNl8:btng54SMLr+/AO/kIhfoKMHdl
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_57f8dd342d7d5c533aa2ab608c2a3d4c_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-21_57f8dd342d7d5c533aa2ab608c2a3d4c_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_57f8dd342d7d5c533aa2ab608c2a3d4c_cryptolocker
-
Size
60KB
-
MD5
57f8dd342d7d5c533aa2ab608c2a3d4c
-
SHA1
fd6bfba5e804a0e197841c327087304ea627d754
-
SHA256
27f3027d489037d3d3e1cfcae2a883572a66a1dbd0113ded221327b7b2cab20a
-
SHA512
3280f5bc81b683854dc8c45a316d05fcfb6afbe5f757d7a5ae601a0a12a0e281826393b1ca05ef4b4c96d4f0127a3ea39e65db68b45ca0001fcf3c426ee7d5cb
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHNl8:btng54SMLr+/AO/kIhfoKMHdl
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-