General
-
Target
2024-03-05_e75651e367431c84a0c31e25f235aec6_cryptolocker
-
Size
81KB
-
Sample
240305-s7cqsaad5w
-
MD5
e75651e367431c84a0c31e25f235aec6
-
SHA1
161666092db779c4b016235443d2047bf5bf22d8
-
SHA256
349c80bc7011cc283dc6d024b237712c88682f8262e87d8f8dc35c29e7c9a5c2
-
SHA512
1efe82ff6caa32cbc00a0016c80093f6aa4a98680e89d861899465582a227e123c662472ff9272812c7ff22d39c1fd5a0d263db7767771d8fdb658141eea3ffe
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMM2:TCjsIOtEvwDpj5HE/OUHnSMk
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_e75651e367431c84a0c31e25f235aec6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_e75651e367431c84a0c31e25f235aec6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-05_e75651e367431c84a0c31e25f235aec6_cryptolocker
-
Size
81KB
-
MD5
e75651e367431c84a0c31e25f235aec6
-
SHA1
161666092db779c4b016235443d2047bf5bf22d8
-
SHA256
349c80bc7011cc283dc6d024b237712c88682f8262e87d8f8dc35c29e7c9a5c2
-
SHA512
1efe82ff6caa32cbc00a0016c80093f6aa4a98680e89d861899465582a227e123c662472ff9272812c7ff22d39c1fd5a0d263db7767771d8fdb658141eea3ffe
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMM2:TCjsIOtEvwDpj5HE/OUHnSMk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-