General
-
Target
2024-02-22_a5f64a52bdfefd9f32738fc664cb175c_cryptolocker
-
Size
38KB
-
Sample
240222-wc51madc21
-
MD5
a5f64a52bdfefd9f32738fc664cb175c
-
SHA1
3559fd9876d8591868f5cddbbcab20c1266f10d0
-
SHA256
9bf2278cf4e3aacc161577e96776868d00baa7554b67159154f58dd50de35a0b
-
SHA512
0560d3006a6c83ef5446173ea81689398898b20239ce4ef1de69e1b70d3bceb95f0dc7b502fcb5bbb3aa9d42d59900dfdefac4cf0c298e956be1f172abda775f
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/JyAF:X6QFElP6n+gJQMOtEvwDpjBsYK/XF
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_a5f64a52bdfefd9f32738fc664cb175c_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-22_a5f64a52bdfefd9f32738fc664cb175c_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_a5f64a52bdfefd9f32738fc664cb175c_cryptolocker
-
Size
38KB
-
MD5
a5f64a52bdfefd9f32738fc664cb175c
-
SHA1
3559fd9876d8591868f5cddbbcab20c1266f10d0
-
SHA256
9bf2278cf4e3aacc161577e96776868d00baa7554b67159154f58dd50de35a0b
-
SHA512
0560d3006a6c83ef5446173ea81689398898b20239ce4ef1de69e1b70d3bceb95f0dc7b502fcb5bbb3aa9d42d59900dfdefac4cf0c298e956be1f172abda775f
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/JyAF:X6QFElP6n+gJQMOtEvwDpjBsYK/XF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-