General
-
Target
2024-04-19_2c78e338a219b8943e4b6e99965972b8_cryptolocker
-
Size
34KB
-
Sample
240419-rvmvjsfe9z
-
MD5
2c78e338a219b8943e4b6e99965972b8
-
SHA1
475cb1ee02176d700e02cecffa4a09e48408cb56
-
SHA256
fc88412585e46c1d94ea2322e3b5fa158e832d1e7a8eb7322ff33bba7260eceb
-
SHA512
6ae1ccd0c6059ae12f5a90373c62e62bec50e99993e3d7155ca293e685c997d6d78b6fcd6bf95be84e92b9018b400d0950a0f6f01a146524f677d5aad691c8e8
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxK:bA74zYcgT/Ekd0ryfjPIunqpeNswm6K
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_2c78e338a219b8943e4b6e99965972b8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-19_2c78e338a219b8943e4b6e99965972b8_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-19_2c78e338a219b8943e4b6e99965972b8_cryptolocker
-
Size
34KB
-
MD5
2c78e338a219b8943e4b6e99965972b8
-
SHA1
475cb1ee02176d700e02cecffa4a09e48408cb56
-
SHA256
fc88412585e46c1d94ea2322e3b5fa158e832d1e7a8eb7322ff33bba7260eceb
-
SHA512
6ae1ccd0c6059ae12f5a90373c62e62bec50e99993e3d7155ca293e685c997d6d78b6fcd6bf95be84e92b9018b400d0950a0f6f01a146524f677d5aad691c8e8
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxK:bA74zYcgT/Ekd0ryfjPIunqpeNswm6K
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-