General
-
Target
2024-03-06_bf8e62c6c845c2b07f45e2678b40b090_cryptolocker
-
Size
68KB
-
Sample
240306-hadlpsdb4x
-
MD5
bf8e62c6c845c2b07f45e2678b40b090
-
SHA1
107ea3ab66df4d7f48459a7833124385340e2836
-
SHA256
6b9c14a8342d8139a4af83e24088e0d00a8d09779682a5fb2bb6e8ab6058e51b
-
SHA512
9d82ad43602ec669539dbe596748ee137faa788775478f3a5bd1ba7b2f75638d6ef506e53292c8d2b037bef1930f582f44f6ad62089efcf39dd14d6839584799
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R7:vj+jsMQMOtEvwDpj5HZYTjipvF24gC
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_bf8e62c6c845c2b07f45e2678b40b090_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_bf8e62c6c845c2b07f45e2678b40b090_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_bf8e62c6c845c2b07f45e2678b40b090_cryptolocker
-
Size
68KB
-
MD5
bf8e62c6c845c2b07f45e2678b40b090
-
SHA1
107ea3ab66df4d7f48459a7833124385340e2836
-
SHA256
6b9c14a8342d8139a4af83e24088e0d00a8d09779682a5fb2bb6e8ab6058e51b
-
SHA512
9d82ad43602ec669539dbe596748ee137faa788775478f3a5bd1ba7b2f75638d6ef506e53292c8d2b037bef1930f582f44f6ad62089efcf39dd14d6839584799
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R7:vj+jsMQMOtEvwDpj5HZYTjipvF24gC
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-