General
-
Target
2024-03-09_eb918c5a46956ff4084d2f54bc10de43_cryptolocker
-
Size
34KB
-
Sample
240309-dlx29sca86
-
MD5
eb918c5a46956ff4084d2f54bc10de43
-
SHA1
e2737ea63a3cc69c82907da3150e6c96f6f4bcc2
-
SHA256
07ca8b41ac4e250b73b69c5840e1997f219e946dfc330a1f139696023ab7e65e
-
SHA512
785513a2dab5a58fe047da2350c76f0321264e933361db7b7c93af58e93281a5f02101c90f7c67cc2b2cc252e7834b102151aedd446a2407e5738c6ac077cd3c
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0f9HMi:btB9g/WItCSsAGjX7e9N8si
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_eb918c5a46956ff4084d2f54bc10de43_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_eb918c5a46956ff4084d2f54bc10de43_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_eb918c5a46956ff4084d2f54bc10de43_cryptolocker
-
Size
34KB
-
MD5
eb918c5a46956ff4084d2f54bc10de43
-
SHA1
e2737ea63a3cc69c82907da3150e6c96f6f4bcc2
-
SHA256
07ca8b41ac4e250b73b69c5840e1997f219e946dfc330a1f139696023ab7e65e
-
SHA512
785513a2dab5a58fe047da2350c76f0321264e933361db7b7c93af58e93281a5f02101c90f7c67cc2b2cc252e7834b102151aedd446a2407e5738c6ac077cd3c
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0f9HMi:btB9g/WItCSsAGjX7e9N8si
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-