General
-
Target
2024-03-13_5092d7a5ccfcfb76f984adadd52f099b_cryptolocker
-
Size
38KB
-
Sample
240313-r4zkpsfe6z
-
MD5
5092d7a5ccfcfb76f984adadd52f099b
-
SHA1
1d722143ddbe5c10e82e8a336dabdcc0e3bad11c
-
SHA256
de166cb5d0e3aac775deda9e1470bd36300eaf28604bbc451d080aa4c9f31736
-
SHA512
614ccd58d63225131742a5ebd7b6b472fa267cc331b7acf9a212b7756e76fd8ef24fc245b6fc33b4b695d045b01e47348332234f017c0dd07cb76ee7e6afc39f
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfX2x:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXW
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_5092d7a5ccfcfb76f984adadd52f099b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_5092d7a5ccfcfb76f984adadd52f099b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_5092d7a5ccfcfb76f984adadd52f099b_cryptolocker
-
Size
38KB
-
MD5
5092d7a5ccfcfb76f984adadd52f099b
-
SHA1
1d722143ddbe5c10e82e8a336dabdcc0e3bad11c
-
SHA256
de166cb5d0e3aac775deda9e1470bd36300eaf28604bbc451d080aa4c9f31736
-
SHA512
614ccd58d63225131742a5ebd7b6b472fa267cc331b7acf9a212b7756e76fd8ef24fc245b6fc33b4b695d045b01e47348332234f017c0dd07cb76ee7e6afc39f
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfX2x:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-