General
-
Target
2024-03-11_e479b76447674936414c27e8222aef0a_cryptolocker
-
Size
32KB
-
Sample
240311-v7ypcshf5y
-
MD5
e479b76447674936414c27e8222aef0a
-
SHA1
fc6d5df56906f84bd9e5d672f1903f1107302e9e
-
SHA256
da4cb6b671b6d6a37ddf0350881d6f5f43f9b74dd6e4278819f24a2148ec007b
-
SHA512
db2cac0530bcb75eb2d4a8a9fcd059729a51fbfb31f90908ee04f97cb670febd6975775ee74be9f92c6f7149d96910d102ad5a6b73f3bde8d0e831c95ee7d6fa
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0aOtS:b7o/2n1TCraU6GD1a4Xt9R0aOM
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-11_e479b76447674936414c27e8222aef0a_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-11_e479b76447674936414c27e8222aef0a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-11_e479b76447674936414c27e8222aef0a_cryptolocker
-
Size
32KB
-
MD5
e479b76447674936414c27e8222aef0a
-
SHA1
fc6d5df56906f84bd9e5d672f1903f1107302e9e
-
SHA256
da4cb6b671b6d6a37ddf0350881d6f5f43f9b74dd6e4278819f24a2148ec007b
-
SHA512
db2cac0530bcb75eb2d4a8a9fcd059729a51fbfb31f90908ee04f97cb670febd6975775ee74be9f92c6f7149d96910d102ad5a6b73f3bde8d0e831c95ee7d6fa
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9R0aOtS:b7o/2n1TCraU6GD1a4Xt9R0aOM
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-