General
-
Target
2024-03-15_dbf277ec2718dcff1efcddabb76faba6_cryptolocker
-
Size
37KB
-
Sample
240315-a7538acd5x
-
MD5
dbf277ec2718dcff1efcddabb76faba6
-
SHA1
bac1d1f1546a4dd6417dd833e996a8debea42674
-
SHA256
58c0776d8d2a0658555203957c148008cabb14c8c75febd76ed2a2e7126108ff
-
SHA512
9e931d0ea033060b4669177b30d97b6d86b5d80adcb4ef4e88497f9c77a55a48e97c58fa76703ed73ad1f26e944e06c72db04cee6a230284a35a70ad7f15199f
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAYMj:ZzFbxmLPWQMOtEvwDpjLeJAYMj
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_dbf277ec2718dcff1efcddabb76faba6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_dbf277ec2718dcff1efcddabb76faba6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_dbf277ec2718dcff1efcddabb76faba6_cryptolocker
-
Size
37KB
-
MD5
dbf277ec2718dcff1efcddabb76faba6
-
SHA1
bac1d1f1546a4dd6417dd833e996a8debea42674
-
SHA256
58c0776d8d2a0658555203957c148008cabb14c8c75febd76ed2a2e7126108ff
-
SHA512
9e931d0ea033060b4669177b30d97b6d86b5d80adcb4ef4e88497f9c77a55a48e97c58fa76703ed73ad1f26e944e06c72db04cee6a230284a35a70ad7f15199f
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAYMj:ZzFbxmLPWQMOtEvwDpjLeJAYMj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-