General
-
Target
2024-03-15_58ff1fb75146ff4367401da2989cc966_cryptolocker
-
Size
48KB
-
Sample
240315-axgymsdh43
-
MD5
58ff1fb75146ff4367401da2989cc966
-
SHA1
9974eeac7d40cf523dfc6ae0ac33a937ba8ef460
-
SHA256
114044e113112970bd6fd1cb5033575ffad9c889126b17192104afbe7ad64f25
-
SHA512
0e95a122fe55fbb8b0d7ee6be813f19a8ef2d6f9515163acf8432f4282fcec1bb56487159ad0419180410bdf2d15b45436b51d5a1e384ca46ce7ae2746415c7c
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvhN:bgGYcA/53GAA6y37nbBN
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_58ff1fb75146ff4367401da2989cc966_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_58ff1fb75146ff4367401da2989cc966_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_58ff1fb75146ff4367401da2989cc966_cryptolocker
-
Size
48KB
-
MD5
58ff1fb75146ff4367401da2989cc966
-
SHA1
9974eeac7d40cf523dfc6ae0ac33a937ba8ef460
-
SHA256
114044e113112970bd6fd1cb5033575ffad9c889126b17192104afbe7ad64f25
-
SHA512
0e95a122fe55fbb8b0d7ee6be813f19a8ef2d6f9515163acf8432f4282fcec1bb56487159ad0419180410bdf2d15b45436b51d5a1e384ca46ce7ae2746415c7c
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvhN:bgGYcA/53GAA6y37nbBN
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-