General
-
Target
2024-03-19_63d5cf0ba0e6916100cff027e0c5b6af_cryptolocker
-
Size
39KB
-
Sample
240319-yjnq2aee3t
-
MD5
63d5cf0ba0e6916100cff027e0c5b6af
-
SHA1
6b0801377592c0ccb33bf204f320335b32df29f1
-
SHA256
04a57e9fa2666182881e53ec895a23a2683962efa9a1317c6d78f8ba54662f87
-
SHA512
ed69bc92d2dbe70f7556d19221f1c19f92c02ef1b274e1141162d49b7d6a7407276e5311b1106e945505e92de21de88e2580545d0df455e87c3a467db83d8ae2
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfX2xx:bgX4zYcgTEu6QOaryfjqDDw3sCu5mX8
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_63d5cf0ba0e6916100cff027e0c5b6af_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-19_63d5cf0ba0e6916100cff027e0c5b6af_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_63d5cf0ba0e6916100cff027e0c5b6af_cryptolocker
-
Size
39KB
-
MD5
63d5cf0ba0e6916100cff027e0c5b6af
-
SHA1
6b0801377592c0ccb33bf204f320335b32df29f1
-
SHA256
04a57e9fa2666182881e53ec895a23a2683962efa9a1317c6d78f8ba54662f87
-
SHA512
ed69bc92d2dbe70f7556d19221f1c19f92c02ef1b274e1141162d49b7d6a7407276e5311b1106e945505e92de21de88e2580545d0df455e87c3a467db83d8ae2
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfX2xx:bgX4zYcgTEu6QOaryfjqDDw3sCu5mX8
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-