General
-
Target
2024-04-16_16108135a5677494f690efc6570080f4_cryptolocker
-
Size
74KB
-
Sample
240416-h9tf7seb5y
-
MD5
16108135a5677494f690efc6570080f4
-
SHA1
d53440ae27201e3fa514d02f4d39ed73acb48f5b
-
SHA256
b6ae71edaaeef7e8280754804e34dd75553560a6452549faca58b0653705a8b1
-
SHA512
e61237edfbf310b829514571c983955e5b45226d4c5221dd659a087f0738488ee7cd48f856b7837cb24cddae08a34f6fab87377fd30f248533924fc703fd1f3c
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsO:X6a+SOtEvwDpjBZYvQd2l
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_16108135a5677494f690efc6570080f4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_16108135a5677494f690efc6570080f4_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_16108135a5677494f690efc6570080f4_cryptolocker
-
Size
74KB
-
MD5
16108135a5677494f690efc6570080f4
-
SHA1
d53440ae27201e3fa514d02f4d39ed73acb48f5b
-
SHA256
b6ae71edaaeef7e8280754804e34dd75553560a6452549faca58b0653705a8b1
-
SHA512
e61237edfbf310b829514571c983955e5b45226d4c5221dd659a087f0738488ee7cd48f856b7837cb24cddae08a34f6fab87377fd30f248533924fc703fd1f3c
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsO:X6a+SOtEvwDpjBZYvQd2l
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-