General
-
Target
2024-04-11_7ad200ced9717527099aacbbc17a81d2_cryptolocker
-
Size
56KB
-
Sample
240411-nry7madg6x
-
MD5
7ad200ced9717527099aacbbc17a81d2
-
SHA1
8c08127655f5a1165b3780e1e0b70999efca2aad
-
SHA256
2a61e68f91e2bc78124fe65a4c590d15cf4f4ad21cb973b1bb137ae4e647ae6a
-
SHA512
2d6eaf71d74a177ee80c7e89b4bd45631e53fddfe6a4e4b10e22dc2971e4a681970233ef4b2e71dbff0943634accde9fe59bc7b28ba32139e649749f02ead10a
-
SSDEEP
1536:X6QFElP6n+gJBMOtEvwDpjBtE1yILJ0Vof:X6a+BOtEvwDpjBOxf
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-11_7ad200ced9717527099aacbbc17a81d2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-11_7ad200ced9717527099aacbbc17a81d2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-11_7ad200ced9717527099aacbbc17a81d2_cryptolocker
-
Size
56KB
-
MD5
7ad200ced9717527099aacbbc17a81d2
-
SHA1
8c08127655f5a1165b3780e1e0b70999efca2aad
-
SHA256
2a61e68f91e2bc78124fe65a4c590d15cf4f4ad21cb973b1bb137ae4e647ae6a
-
SHA512
2d6eaf71d74a177ee80c7e89b4bd45631e53fddfe6a4e4b10e22dc2971e4a681970233ef4b2e71dbff0943634accde9fe59bc7b28ba32139e649749f02ead10a
-
SSDEEP
1536:X6QFElP6n+gJBMOtEvwDpjBtE1yILJ0Vof:X6a+BOtEvwDpjBOxf
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-