General
-
Target
2024-03-27_6a067f58eb10a828556ace242510ab12_cryptolocker
-
Size
43KB
-
Sample
240327-yl61dsaf88
-
MD5
6a067f58eb10a828556ace242510ab12
-
SHA1
1c9951acf81f41b829e00b7229ef7951292d29e7
-
SHA256
0b1ee9d580395c27bc06a08b34615497abf28c227178cfe0215bd6db8b596112
-
SHA512
6ba2e537be4efb80b253143caf0b353071cc8d2ca9ac96895cf150befe1d1c813ba6df306e7901b82c54d873cd397b875e602ea32ef18e935fd13068933ee3b2
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNH:bgGYcA/53GADw8Cl/O
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_6a067f58eb10a828556ace242510ab12_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_6a067f58eb10a828556ace242510ab12_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-27_6a067f58eb10a828556ace242510ab12_cryptolocker
-
Size
43KB
-
MD5
6a067f58eb10a828556ace242510ab12
-
SHA1
1c9951acf81f41b829e00b7229ef7951292d29e7
-
SHA256
0b1ee9d580395c27bc06a08b34615497abf28c227178cfe0215bd6db8b596112
-
SHA512
6ba2e537be4efb80b253143caf0b353071cc8d2ca9ac96895cf150befe1d1c813ba6df306e7901b82c54d873cd397b875e602ea32ef18e935fd13068933ee3b2
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNH:bgGYcA/53GADw8Cl/O
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-