General
-
Target
2024-03-05_4051c846c85ee8f1fdf6fa6d5735e705_cryptolocker
-
Size
41KB
-
Sample
240305-rrm15sgg9s
-
MD5
4051c846c85ee8f1fdf6fa6d5735e705
-
SHA1
2d664ca0b7a54e5aa9e83f42254d00fe0623d1f1
-
SHA256
60c8e26ee0cd421f7252a6261548dd9b64260c361f0fa5929724d02fbf0a3f47
-
SHA512
b50844d4bd176b03415f421308c04dfebdeb1a3ef74bc21f78ff37acf4ad2e20d66a961abc974bb7f68f38408361128d701d17258162f0bd98ae002c8ebf3ed7
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POK8D:bIDOw9a0Dwo3P1ojvUSDh2
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_4051c846c85ee8f1fdf6fa6d5735e705_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_4051c846c85ee8f1fdf6fa6d5735e705_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-05_4051c846c85ee8f1fdf6fa6d5735e705_cryptolocker
-
Size
41KB
-
MD5
4051c846c85ee8f1fdf6fa6d5735e705
-
SHA1
2d664ca0b7a54e5aa9e83f42254d00fe0623d1f1
-
SHA256
60c8e26ee0cd421f7252a6261548dd9b64260c361f0fa5929724d02fbf0a3f47
-
SHA512
b50844d4bd176b03415f421308c04dfebdeb1a3ef74bc21f78ff37acf4ad2e20d66a961abc974bb7f68f38408361128d701d17258162f0bd98ae002c8ebf3ed7
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POK8D:bIDOw9a0Dwo3P1ojvUSDh2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-