General
-
Target
2024-03-08_4e8ba14d8bf79842c71400c0f7b4b11c_cryptolocker
-
Size
54KB
-
Sample
240308-pths4afa68
-
MD5
4e8ba14d8bf79842c71400c0f7b4b11c
-
SHA1
ed6f55a1fb30abba9467fcafd6f32690f7b09522
-
SHA256
c0444fa3ce3a785d1d69254d1731b988dbd35f779c33c4b3dd4b321a1ed0c062
-
SHA512
3adf90f928032980cb9639aed0f9a7047a5dd1607d00cd065880b4ae92ea0241534120fec978ee09d5ef1d599cd98bd91597b1e8898e4a31b4ee37fda6978787
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv6dy/wXps:vj+jsMQMOtEvwDpj5HH1nw73KOFSO
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_4e8ba14d8bf79842c71400c0f7b4b11c_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-08_4e8ba14d8bf79842c71400c0f7b4b11c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_4e8ba14d8bf79842c71400c0f7b4b11c_cryptolocker
-
Size
54KB
-
MD5
4e8ba14d8bf79842c71400c0f7b4b11c
-
SHA1
ed6f55a1fb30abba9467fcafd6f32690f7b09522
-
SHA256
c0444fa3ce3a785d1d69254d1731b988dbd35f779c33c4b3dd4b321a1ed0c062
-
SHA512
3adf90f928032980cb9639aed0f9a7047a5dd1607d00cd065880b4ae92ea0241534120fec978ee09d5ef1d599cd98bd91597b1e8898e4a31b4ee37fda6978787
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv6dy/wXps:vj+jsMQMOtEvwDpj5HH1nw73KOFSO
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-