General
-
Target
2024-04-04_e20a2a8f9c196193c2891f0139938cc9_cryptolocker
-
Size
42KB
-
Sample
240404-vhh8dada6y
-
MD5
e20a2a8f9c196193c2891f0139938cc9
-
SHA1
a458d7b674223eeadfa25d54d5aad18db0cdeedb
-
SHA256
9354f3e8c8522c479e9f54dc421244e02f620d55e3e6181f668b786eee85d69d
-
SHA512
4cee378d6c5559ca701bf00de94cdc0ee8d28cc6ff93dcf94711f8f945116d247d3d59e27cf193931773c7ab8132206ee3dea1f347d32b207544186ab08e2ba9
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx+:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XT
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-04_e20a2a8f9c196193c2891f0139938cc9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-04_e20a2a8f9c196193c2891f0139938cc9_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-04_e20a2a8f9c196193c2891f0139938cc9_cryptolocker
-
Size
42KB
-
MD5
e20a2a8f9c196193c2891f0139938cc9
-
SHA1
a458d7b674223eeadfa25d54d5aad18db0cdeedb
-
SHA256
9354f3e8c8522c479e9f54dc421244e02f620d55e3e6181f668b786eee85d69d
-
SHA512
4cee378d6c5559ca701bf00de94cdc0ee8d28cc6ff93dcf94711f8f945116d247d3d59e27cf193931773c7ab8132206ee3dea1f347d32b207544186ab08e2ba9
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx+:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-