General
-
Target
2024-03-07_382fb84d573cbea97374281f88954a0c_cryptolocker
-
Size
60KB
-
Sample
240307-1bxebafc5v
-
MD5
382fb84d573cbea97374281f88954a0c
-
SHA1
9db1ff4d84d0e0a85d8a1a07017e50735212ab8f
-
SHA256
fb46c6ae9cad3b3997a3ebc5d34312e24f4c19b8986daebaa07da4c5a93c14db
-
SHA512
b3a8a1fdd5af1913ac23c91288d8d1fdde652fe499efbb565bf160c5f9fe6e667c09b2875192b0a20958aa9901e31fce460f20d3e3b5094414caa284d72580c3
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoYPO+lxUU9:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_382fb84d573cbea97374281f88954a0c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_382fb84d573cbea97374281f88954a0c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_382fb84d573cbea97374281f88954a0c_cryptolocker
-
Size
60KB
-
MD5
382fb84d573cbea97374281f88954a0c
-
SHA1
9db1ff4d84d0e0a85d8a1a07017e50735212ab8f
-
SHA256
fb46c6ae9cad3b3997a3ebc5d34312e24f4c19b8986daebaa07da4c5a93c14db
-
SHA512
b3a8a1fdd5af1913ac23c91288d8d1fdde652fe499efbb565bf160c5f9fe6e667c09b2875192b0a20958aa9901e31fce460f20d3e3b5094414caa284d72580c3
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoYPO+lxUU9:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lb
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-