General
-
Target
2024-03-06_ec24f3dc73e4dc0c70eb967700b789c6_cryptolocker
-
Size
39KB
-
Sample
240306-q5kx9sdd37
-
MD5
ec24f3dc73e4dc0c70eb967700b789c6
-
SHA1
31993f70f356473a1600fd6b08606ed3cf83dd31
-
SHA256
8f3dc4b28902f31a6c11e48dc36d74c74194382e17d3800a2c2d74f606f9d5b5
-
SHA512
7d417c9c1ef51aabefe4b311736a0f5f349b8c99953b8887728ec6e46b95aae6c74dc0edb8f54b48439f0e605e6bc3a7a898b5e18970ed3b9b1c8f22c0eb7218
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QX5:bAvJCYOOvbRPDEgXrNekd7l94i3pF0o5
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_ec24f3dc73e4dc0c70eb967700b789c6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_ec24f3dc73e4dc0c70eb967700b789c6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_ec24f3dc73e4dc0c70eb967700b789c6_cryptolocker
-
Size
39KB
-
MD5
ec24f3dc73e4dc0c70eb967700b789c6
-
SHA1
31993f70f356473a1600fd6b08606ed3cf83dd31
-
SHA256
8f3dc4b28902f31a6c11e48dc36d74c74194382e17d3800a2c2d74f606f9d5b5
-
SHA512
7d417c9c1ef51aabefe4b311736a0f5f349b8c99953b8887728ec6e46b95aae6c74dc0edb8f54b48439f0e605e6bc3a7a898b5e18970ed3b9b1c8f22c0eb7218
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QX5:bAvJCYOOvbRPDEgXrNekd7l94i3pF0o5
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-