General
-
Target
2024-02-28_16cd1fedae411f76335e7053b86c28d4_cryptolocker
-
Size
41KB
-
Sample
240228-cxlypshb76
-
MD5
16cd1fedae411f76335e7053b86c28d4
-
SHA1
968db8415bcd4c30eda7431e1d404649faebb57e
-
SHA256
9a8c7306bdba24abaa4b8b623738504cdcd34a7d087baae9941a522fb524b19a
-
SHA512
5e869762d639e72debd994d131b4afd30422db9c088552b9ed17141bfcb4985695dd0152c7fec40b387003a2cdf4475ab08e0441220277ad8b65ef7cdcfc1edb
-
SSDEEP
768:btB9g/WItCSsAGjX7e9N0hunrknJQox0b:btB9g/xtCSKqf1rk+ox0b
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_16cd1fedae411f76335e7053b86c28d4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_16cd1fedae411f76335e7053b86c28d4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_16cd1fedae411f76335e7053b86c28d4_cryptolocker
-
Size
41KB
-
MD5
16cd1fedae411f76335e7053b86c28d4
-
SHA1
968db8415bcd4c30eda7431e1d404649faebb57e
-
SHA256
9a8c7306bdba24abaa4b8b623738504cdcd34a7d087baae9941a522fb524b19a
-
SHA512
5e869762d639e72debd994d131b4afd30422db9c088552b9ed17141bfcb4985695dd0152c7fec40b387003a2cdf4475ab08e0441220277ad8b65ef7cdcfc1edb
-
SSDEEP
768:btB9g/WItCSsAGjX7e9N0hunrknJQox0b:btB9g/xtCSKqf1rk+ox0b
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-