General
-
Target
2024-03-15_8a3898c8b75daecd281235340ec0904c_cryptolocker
-
Size
38KB
-
Sample
240315-1ephwade73
-
MD5
8a3898c8b75daecd281235340ec0904c
-
SHA1
c7ce5ad48f8b33ae7ded6f1a52485852ce412e39
-
SHA256
98940e3c78c5294a0ce5f40af23f5ec2f73b26d7461d9291ebef0c4e952474db
-
SHA512
34aa4171ccd0f4749dbf5afd0fd4eb7d16e5c8ffc4242941fec5ed2d98806e5e8b44fdf90cc050aef0dc15567c4f55b8d76d08182149369acc0e6be3e0f3db41
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QxN:bAvJCYOOvbRPDEgXrNekd7l94i3pF0C
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_8a3898c8b75daecd281235340ec0904c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_8a3898c8b75daecd281235340ec0904c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_8a3898c8b75daecd281235340ec0904c_cryptolocker
-
Size
38KB
-
MD5
8a3898c8b75daecd281235340ec0904c
-
SHA1
c7ce5ad48f8b33ae7ded6f1a52485852ce412e39
-
SHA256
98940e3c78c5294a0ce5f40af23f5ec2f73b26d7461d9291ebef0c4e952474db
-
SHA512
34aa4171ccd0f4749dbf5afd0fd4eb7d16e5c8ffc4242941fec5ed2d98806e5e8b44fdf90cc050aef0dc15567c4f55b8d76d08182149369acc0e6be3e0f3db41
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0QxN:bAvJCYOOvbRPDEgXrNekd7l94i3pF0C
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-