General
-
Target
2024-04-17_34211105dd7575fc2150d83479c9d94b_cryptolocker
-
Size
389KB
-
Sample
240417-mjf6eaca85
-
MD5
34211105dd7575fc2150d83479c9d94b
-
SHA1
964dd5fd715d010ee21bd014e14509922525bc7c
-
SHA256
abf151b06c292633b1c2fa1810fec9e74d56c11ed5473d6b600007eaf14e6d05
-
SHA512
087f072aa6d0222a5b923428306e36f2e7176ab05339d7dd01444300f9f2face750cff5bb941fef7971ed161b80d3963ebb6e0b91abf8976be4dd3c87ad3a153
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXa:nnOflT/ZFIjBz3xjTxynGUOUhXa
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_34211105dd7575fc2150d83479c9d94b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-17_34211105dd7575fc2150d83479c9d94b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-17_34211105dd7575fc2150d83479c9d94b_cryptolocker
-
Size
389KB
-
MD5
34211105dd7575fc2150d83479c9d94b
-
SHA1
964dd5fd715d010ee21bd014e14509922525bc7c
-
SHA256
abf151b06c292633b1c2fa1810fec9e74d56c11ed5473d6b600007eaf14e6d05
-
SHA512
087f072aa6d0222a5b923428306e36f2e7176ab05339d7dd01444300f9f2face750cff5bb941fef7971ed161b80d3963ebb6e0b91abf8976be4dd3c87ad3a153
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXa:nnOflT/ZFIjBz3xjTxynGUOUhXa
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-