General
-
Target
2024-02-22_c91af47ec876293a917223c696c0c0a9_cryptolocker
-
Size
38KB
-
Sample
240222-f6l7lsch62
-
MD5
c91af47ec876293a917223c696c0c0a9
-
SHA1
d84749d970ff4921e01610bf6e254154a7ddba1c
-
SHA256
d19cdfe515dc6baad319a245e9c559254e37e387d4c596ed44963a324afabbf4
-
SHA512
9b9551f0d84a6a9ad6dea7da29fcd869d8ad1b4dd515d2ea66533f045b6ffe2bc1c1ab2a47453a7344de2352ac92d354ae170cd69d34bddc2b1d97a926f6c979
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfXsT7:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXq7
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_c91af47ec876293a917223c696c0c0a9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_c91af47ec876293a917223c696c0c0a9_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_c91af47ec876293a917223c696c0c0a9_cryptolocker
-
Size
38KB
-
MD5
c91af47ec876293a917223c696c0c0a9
-
SHA1
d84749d970ff4921e01610bf6e254154a7ddba1c
-
SHA256
d19cdfe515dc6baad319a245e9c559254e37e387d4c596ed44963a324afabbf4
-
SHA512
9b9551f0d84a6a9ad6dea7da29fcd869d8ad1b4dd515d2ea66533f045b6ffe2bc1c1ab2a47453a7344de2352ac92d354ae170cd69d34bddc2b1d97a926f6c979
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfXsT7:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXq7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-