General
-
Target
2024-04-11_dff155655eeb09be50495c88369a83d2_cryptolocker
-
Size
30KB
-
Sample
240411-s7qbwahh9s
-
MD5
dff155655eeb09be50495c88369a83d2
-
SHA1
fe16d72acb56abbe8cbf02266f8ba5ccae3ef80b
-
SHA256
1a16ae65a01c81c2a4a4ebb3648abb32af2ae251ad9ad3fd31d0a09dee052607
-
SHA512
fa68b8773133d57bcb80bd08a469ca7fd52e9244f6c340fe897e322fc87893cadc58f91611bcfd4b19dded9edccf4962238c161990c3c186ae529d769aeb4f08
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGT9U+:bG74zYcgT/Ekd0ryfjC+
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-11_dff155655eeb09be50495c88369a83d2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-11_dff155655eeb09be50495c88369a83d2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-11_dff155655eeb09be50495c88369a83d2_cryptolocker
-
Size
30KB
-
MD5
dff155655eeb09be50495c88369a83d2
-
SHA1
fe16d72acb56abbe8cbf02266f8ba5ccae3ef80b
-
SHA256
1a16ae65a01c81c2a4a4ebb3648abb32af2ae251ad9ad3fd31d0a09dee052607
-
SHA512
fa68b8773133d57bcb80bd08a469ca7fd52e9244f6c340fe897e322fc87893cadc58f91611bcfd4b19dded9edccf4962238c161990c3c186ae529d769aeb4f08
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGT9U+:bG74zYcgT/Ekd0ryfjC+
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-