General
-
Target
2024-02-25_1fb7752e2b9aca5e87ca6c9534534328_cryptolocker
-
Size
82KB
-
Sample
240225-atrcxahb29
-
MD5
1fb7752e2b9aca5e87ca6c9534534328
-
SHA1
6a0725838a2084296ad58334c61619eb62c0dcd1
-
SHA256
529f9f33ebda16aad05b91daab267cf22cf200ce86f25c5ce4739b3e0ff3fae5
-
SHA512
ff4778bd71a36c98291832084bfba89e06cf6974a2421f6f476684e296dcf1c1cb62e95ea61a576d87174b86374cde3164290664c61c153af6837d8577606f57
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMAeO:TCjsIOtEvwDpj5HE/OUHnSMk
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-25_1fb7752e2b9aca5e87ca6c9534534328_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-25_1fb7752e2b9aca5e87ca6c9534534328_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-25_1fb7752e2b9aca5e87ca6c9534534328_cryptolocker
-
Size
82KB
-
MD5
1fb7752e2b9aca5e87ca6c9534534328
-
SHA1
6a0725838a2084296ad58334c61619eb62c0dcd1
-
SHA256
529f9f33ebda16aad05b91daab267cf22cf200ce86f25c5ce4739b3e0ff3fae5
-
SHA512
ff4778bd71a36c98291832084bfba89e06cf6974a2421f6f476684e296dcf1c1cb62e95ea61a576d87174b86374cde3164290664c61c153af6837d8577606f57
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMAeO:TCjsIOtEvwDpj5HE/OUHnSMk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-