General
-
Target
2024-03-13_3d97aec84ff7869566269eead338c272_cryptolocker
-
Size
40KB
-
Sample
240313-zahzvsaa43
-
MD5
3d97aec84ff7869566269eead338c272
-
SHA1
c2361304e6e2f39d6af22dc642810bce4b2f5fca
-
SHA256
dcec101240cb547447003a2d96a50522f37543a55b6044123a54d2217d824922
-
SHA512
60c6dfe7466caaf90c8a295051fe0ce1c66d76789991e4e473d510c5ba3e6c898805f8d059ec78dbd406dc98f3d456040931ee4c2240bcea9a843573a3fd6fb8
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu529hwXwg:bgGYcA/53GADw8Ch92X3
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_3d97aec84ff7869566269eead338c272_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-13_3d97aec84ff7869566269eead338c272_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_3d97aec84ff7869566269eead338c272_cryptolocker
-
Size
40KB
-
MD5
3d97aec84ff7869566269eead338c272
-
SHA1
c2361304e6e2f39d6af22dc642810bce4b2f5fca
-
SHA256
dcec101240cb547447003a2d96a50522f37543a55b6044123a54d2217d824922
-
SHA512
60c6dfe7466caaf90c8a295051fe0ce1c66d76789991e4e473d510c5ba3e6c898805f8d059ec78dbd406dc98f3d456040931ee4c2240bcea9a843573a3fd6fb8
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu529hwXwg:bgGYcA/53GADw8Ch92X3
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-