General
-
Target
2024-03-16_94649797d19bff4393586995409e3bb1_cryptolocker
-
Size
55KB
-
Sample
240316-fgqthacd41
-
MD5
94649797d19bff4393586995409e3bb1
-
SHA1
2ff36231774ad99ba69594b67356ef07405c0130
-
SHA256
b87e0dcbcc61d43b13df33caff9c1159c1a78e27aa4b03aa5a123290916c6dbc
-
SHA512
a7cff6bf8d8bcf198eb3d13f9b905bba617a17d2961dac6ab99d62e11247dabcc324d833fd1e2a1599a73602706e9c2797abb92238dcc4bfe4ce94a204df1e82
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2L0zN/Pcmr:X6QFElP6n+gJBMOtEvwDpjBtE1yILOkg
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-16_94649797d19bff4393586995409e3bb1_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-16_94649797d19bff4393586995409e3bb1_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-16_94649797d19bff4393586995409e3bb1_cryptolocker
-
Size
55KB
-
MD5
94649797d19bff4393586995409e3bb1
-
SHA1
2ff36231774ad99ba69594b67356ef07405c0130
-
SHA256
b87e0dcbcc61d43b13df33caff9c1159c1a78e27aa4b03aa5a123290916c6dbc
-
SHA512
a7cff6bf8d8bcf198eb3d13f9b905bba617a17d2961dac6ab99d62e11247dabcc324d833fd1e2a1599a73602706e9c2797abb92238dcc4bfe4ce94a204df1e82
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2L0zN/Pcmr:X6QFElP6n+gJBMOtEvwDpjBtE1yILOkg
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-