General
-
Target
2024-03-14_d7a0102ab3d859801dd5b91aca289838_cryptolocker
-
Size
45KB
-
Sample
240314-a99t7aef3x
-
MD5
d7a0102ab3d859801dd5b91aca289838
-
SHA1
ea9b09686fee86a9c8059b4769657f5270424516
-
SHA256
40f32a0f6c13ae9787b3c7edc547b18905a924118f9a993a5be3e6a53f853316
-
SHA512
e8091182572bb300041e5582dfdf3b6ce2af30dfe03bd053fd111956065557434e5480d425643fe88cc98628e01542cbb7bbd5a7db8125be5a45315bfb0f284d
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpEypA0:79mqyNhQMOtEvwDpjBzck6pT
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_d7a0102ab3d859801dd5b91aca289838_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-14_d7a0102ab3d859801dd5b91aca289838_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_d7a0102ab3d859801dd5b91aca289838_cryptolocker
-
Size
45KB
-
MD5
d7a0102ab3d859801dd5b91aca289838
-
SHA1
ea9b09686fee86a9c8059b4769657f5270424516
-
SHA256
40f32a0f6c13ae9787b3c7edc547b18905a924118f9a993a5be3e6a53f853316
-
SHA512
e8091182572bb300041e5582dfdf3b6ce2af30dfe03bd053fd111956065557434e5480d425643fe88cc98628e01542cbb7bbd5a7db8125be5a45315bfb0f284d
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvcjpEypA0:79mqyNhQMOtEvwDpjBzck6pT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-