General
-
Target
2024-03-12_dff5c83abd856d72600f47a481d45c0d_cryptolocker
-
Size
47KB
-
Sample
240312-ys6cfacb47
-
MD5
dff5c83abd856d72600f47a481d45c0d
-
SHA1
ab4b9a8f7537c0b97a1cd58dff2b727723f7515f
-
SHA256
bca2d515e0a4d3a8d4f19ba615eea345699f092dc9461ea4b942fb72dc352b57
-
SHA512
019636d773af469cdc903b02f1d301e52047c01f657de381d6610e52ec50c66ee870da8434e7a2aae66cf521b42d73a7837ed20e62dc63de6a9b3d0da73d6853
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvhn9:bgGYcA/53GAA6y37nbBn9
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_dff5c83abd856d72600f47a481d45c0d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_dff5c83abd856d72600f47a481d45c0d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_dff5c83abd856d72600f47a481d45c0d_cryptolocker
-
Size
47KB
-
MD5
dff5c83abd856d72600f47a481d45c0d
-
SHA1
ab4b9a8f7537c0b97a1cd58dff2b727723f7515f
-
SHA256
bca2d515e0a4d3a8d4f19ba615eea345699f092dc9461ea4b942fb72dc352b57
-
SHA512
019636d773af469cdc903b02f1d301e52047c01f657de381d6610e52ec50c66ee870da8434e7a2aae66cf521b42d73a7837ed20e62dc63de6a9b3d0da73d6853
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvhn9:bgGYcA/53GAA6y37nbBn9
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-