General
-
Target
2024-04-05_cfe39e8fec5911e11e5447e13c4ab13f_cryptolocker
-
Size
58KB
-
Sample
240405-bcfqhsfe5z
-
MD5
cfe39e8fec5911e11e5447e13c4ab13f
-
SHA1
8ac39cda3f5b4c8dfc04aff09386171531c5f5eb
-
SHA256
0269267a90bc1903ecb2ed301b5258f5dcada68c5921ca8596e35ae34758ec08
-
SHA512
1374f5c7a0bfbd4c5b90c7fefc8d11e792fecb5cf55a9dc85efabf5d21859e4a4d60256517b08dc00656279ce991b6524a6eb835baf8bb169ffd7b9e46f8d87c
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUH6H:btng54SMLr+/AO/kIhfoKMHdR
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_cfe39e8fec5911e11e5447e13c4ab13f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_cfe39e8fec5911e11e5447e13c4ab13f_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-04-05_cfe39e8fec5911e11e5447e13c4ab13f_cryptolocker
-
Size
58KB
-
MD5
cfe39e8fec5911e11e5447e13c4ab13f
-
SHA1
8ac39cda3f5b4c8dfc04aff09386171531c5f5eb
-
SHA256
0269267a90bc1903ecb2ed301b5258f5dcada68c5921ca8596e35ae34758ec08
-
SHA512
1374f5c7a0bfbd4c5b90c7fefc8d11e792fecb5cf55a9dc85efabf5d21859e4a4d60256517b08dc00656279ce991b6524a6eb835baf8bb169ffd7b9e46f8d87c
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUH6H:btng54SMLr+/AO/kIhfoKMHdR
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-