General
-
Target
2024-03-12_d27aca1c914601d2acdd3e5e90982f08_cryptolocker
-
Size
81KB
-
Sample
240312-yrbrfaaa21
-
MD5
d27aca1c914601d2acdd3e5e90982f08
-
SHA1
f503c0984b3c5200c7c6be6dbc1ac3460c708b67
-
SHA256
e3525c160a945cefc0fc46494bce3ebb959f5ede63bd5e60c0fd7c23df6e077e
-
SHA512
5381927419ddd0638dc4a7d1e2434fb59cab7227209634a99454ba3bac3fb71567dcf51b416b9cb2b27c8f4f2f693fde67b6c6ed931bfe6fe36085536f26e67e
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMA2:TCjsIOtEvwDpj5HE/OUHnSMR
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_d27aca1c914601d2acdd3e5e90982f08_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-12_d27aca1c914601d2acdd3e5e90982f08_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_d27aca1c914601d2acdd3e5e90982f08_cryptolocker
-
Size
81KB
-
MD5
d27aca1c914601d2acdd3e5e90982f08
-
SHA1
f503c0984b3c5200c7c6be6dbc1ac3460c708b67
-
SHA256
e3525c160a945cefc0fc46494bce3ebb959f5ede63bd5e60c0fd7c23df6e077e
-
SHA512
5381927419ddd0638dc4a7d1e2434fb59cab7227209634a99454ba3bac3fb71567dcf51b416b9cb2b27c8f4f2f693fde67b6c6ed931bfe6fe36085536f26e67e
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMA2:TCjsIOtEvwDpj5HE/OUHnSMR
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-