General
-
Target
2024-03-07_ed38bf9f213bdd392d923c7c5eb7d3e1_cryptolocker
-
Size
48KB
-
Sample
240307-bkxn1acg45
-
MD5
ed38bf9f213bdd392d923c7c5eb7d3e1
-
SHA1
84907f3eb2fe55ff73b2cd26842885c6f7c35872
-
SHA256
284a94f204fc0f8d9b3f337f55e5f63ca1b3d22449770912739a500505439ba8
-
SHA512
2225de5ef3e489737df1c5d2dd97bf10eb86cf4ceef9cbe831bdaf9842a212f9db5403c97d61d1b7d8f874d2e11b95c3c5434d89f33374052152640f14f15aba
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8l:vj+jsMQMOtEvwDpj5Hczer5ixuMA
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_ed38bf9f213bdd392d923c7c5eb7d3e1_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_ed38bf9f213bdd392d923c7c5eb7d3e1_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_ed38bf9f213bdd392d923c7c5eb7d3e1_cryptolocker
-
Size
48KB
-
MD5
ed38bf9f213bdd392d923c7c5eb7d3e1
-
SHA1
84907f3eb2fe55ff73b2cd26842885c6f7c35872
-
SHA256
284a94f204fc0f8d9b3f337f55e5f63ca1b3d22449770912739a500505439ba8
-
SHA512
2225de5ef3e489737df1c5d2dd97bf10eb86cf4ceef9cbe831bdaf9842a212f9db5403c97d61d1b7d8f874d2e11b95c3c5434d89f33374052152640f14f15aba
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8l:vj+jsMQMOtEvwDpj5Hczer5ixuMA
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-