General
-
Target
2024-04-19_99f72a65bc49c6012f8e2c56ff449e53_cryptolocker
-
Size
72KB
-
Sample
240419-aygz2abd76
-
MD5
99f72a65bc49c6012f8e2c56ff449e53
-
SHA1
e0f502fea48b44ca6cb7b917a83d4bc268249473
-
SHA256
5ef44dbb12f261835b7add96fa450d61aff48f9ed9f69e4fedde3790da35a30a
-
SHA512
e9a759c975f4d18509400181bc3ef0f2154249b0c0d50d8876a5d379317dd543c9b85d5063674d76a1dd5587633b1b8a5b30a0c29665c685ea419c1aa3006f2d
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1svq:X6a+SOtEvwDpjBZYvQd28q
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_99f72a65bc49c6012f8e2c56ff449e53_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-19_99f72a65bc49c6012f8e2c56ff449e53_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-19_99f72a65bc49c6012f8e2c56ff449e53_cryptolocker
-
Size
72KB
-
MD5
99f72a65bc49c6012f8e2c56ff449e53
-
SHA1
e0f502fea48b44ca6cb7b917a83d4bc268249473
-
SHA256
5ef44dbb12f261835b7add96fa450d61aff48f9ed9f69e4fedde3790da35a30a
-
SHA512
e9a759c975f4d18509400181bc3ef0f2154249b0c0d50d8876a5d379317dd543c9b85d5063674d76a1dd5587633b1b8a5b30a0c29665c685ea419c1aa3006f2d
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1svq:X6a+SOtEvwDpjBZYvQd28q
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-