General
-
Target
2024-03-07_793f8e1a1fe44c1a9c063b5e1e55e800_cryptolocker
-
Size
37KB
-
Sample
240307-c4p9psde29
-
MD5
793f8e1a1fe44c1a9c063b5e1e55e800
-
SHA1
25fe6c04a03d42f848d43588f7a4b1f56890a890
-
SHA256
19407f2d496bd479e04bfd25f8777b6133aa1a3b45d8f4239354f8ddfa314d11
-
SHA512
f86842ecb54027c1ab180d5eae680b55dcf428eec3f992dc659d5d92bed1e08d21422227e6ce804191b1de8ebebabf623388ae8a0c1237e5870fd70f0ec84474
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKc+X:X6QFElP6n+gJQMOtEvwDpjBsYKFX
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_793f8e1a1fe44c1a9c063b5e1e55e800_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_793f8e1a1fe44c1a9c063b5e1e55e800_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_793f8e1a1fe44c1a9c063b5e1e55e800_cryptolocker
-
Size
37KB
-
MD5
793f8e1a1fe44c1a9c063b5e1e55e800
-
SHA1
25fe6c04a03d42f848d43588f7a4b1f56890a890
-
SHA256
19407f2d496bd479e04bfd25f8777b6133aa1a3b45d8f4239354f8ddfa314d11
-
SHA512
f86842ecb54027c1ab180d5eae680b55dcf428eec3f992dc659d5d92bed1e08d21422227e6ce804191b1de8ebebabf623388ae8a0c1237e5870fd70f0ec84474
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKc+X:X6QFElP6n+gJQMOtEvwDpjBsYKFX
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-