General
-
Target
2024-04-17_20781810b801d868248bbe674409c936_cryptolocker
-
Size
41KB
-
Sample
240417-f7x1haeg68
-
MD5
20781810b801d868248bbe674409c936
-
SHA1
91864ac90c115483971b3aa1a26a988fc87e14b6
-
SHA256
95c4aebc4969c146663ce31314f08026e1a0aa34b9b20d96b77e346408640cff
-
SHA512
944ba70d2608257e98743ce0ea04ef635535aef8629f8fb2a095d0c71183f1e297fd18eb32941a602a61643944433b00e14ab18de83ec1548f6be84512c80fc7
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcx:X6QFElP6n+gJQMOtEvwDpjBmzDkWx
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_20781810b801d868248bbe674409c936_cryptolocker.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-17_20781810b801d868248bbe674409c936_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-17_20781810b801d868248bbe674409c936_cryptolocker
-
Size
41KB
-
MD5
20781810b801d868248bbe674409c936
-
SHA1
91864ac90c115483971b3aa1a26a988fc87e14b6
-
SHA256
95c4aebc4969c146663ce31314f08026e1a0aa34b9b20d96b77e346408640cff
-
SHA512
944ba70d2608257e98743ce0ea04ef635535aef8629f8fb2a095d0c71183f1e297fd18eb32941a602a61643944433b00e14ab18de83ec1548f6be84512c80fc7
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcx:X6QFElP6n+gJQMOtEvwDpjBmzDkWx
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-