General
-
Target
2024-04-06_2bd262e3e2ca112d0c5a5e5209c3ba31_cryptolocker
-
Size
48KB
-
Sample
240406-g8resace9t
-
MD5
2bd262e3e2ca112d0c5a5e5209c3ba31
-
SHA1
37707a2ae319d37240b2a64b9c00d1db9fcc6d04
-
SHA256
dbda0e253c7d494ec9c137f60d05733752f1d131bd3e9d23f2f4c1f2ba778489
-
SHA512
70404b135c808abf524c596bb5ca1658bf8850f3bc380950e126607368ff8c328a37a11d2bac721135eba7dff846db7635a0526fd0660e36489f2daf200c7521
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556Blvm:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvm
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_2bd262e3e2ca112d0c5a5e5209c3ba31_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-06_2bd262e3e2ca112d0c5a5e5209c3ba31_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-06_2bd262e3e2ca112d0c5a5e5209c3ba31_cryptolocker
-
Size
48KB
-
MD5
2bd262e3e2ca112d0c5a5e5209c3ba31
-
SHA1
37707a2ae319d37240b2a64b9c00d1db9fcc6d04
-
SHA256
dbda0e253c7d494ec9c137f60d05733752f1d131bd3e9d23f2f4c1f2ba778489
-
SHA512
70404b135c808abf524c596bb5ca1658bf8850f3bc380950e126607368ff8c328a37a11d2bac721135eba7dff846db7635a0526fd0660e36489f2daf200c7521
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556Blvm:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvm
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-