General
-
Target
2024-04-19_2ce4d988a7122b520c0d4cdb81c6eff6_cryptolocker
-
Size
41KB
-
Sample
240419-t14flahb98
-
MD5
2ce4d988a7122b520c0d4cdb81c6eff6
-
SHA1
f15841adc78c6f532139852cc515d25378c2756c
-
SHA256
da08056e6983e51314a4ded715999c419302b9c24f63795798788ea43e14d3b2
-
SHA512
687cc59cc9ba09ccce0a569b76ef22c4bfb8276d6102b0d2649ac6b75412ff40c94461a0f38507b8da42bf84278457457933367d0e9f88597541c70282bab6cd
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3uy:bIDOw9a0Dwo3P1ojvUSD79Rz
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_2ce4d988a7122b520c0d4cdb81c6eff6_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-19_2ce4d988a7122b520c0d4cdb81c6eff6_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-19_2ce4d988a7122b520c0d4cdb81c6eff6_cryptolocker
-
Size
41KB
-
MD5
2ce4d988a7122b520c0d4cdb81c6eff6
-
SHA1
f15841adc78c6f532139852cc515d25378c2756c
-
SHA256
da08056e6983e51314a4ded715999c419302b9c24f63795798788ea43e14d3b2
-
SHA512
687cc59cc9ba09ccce0a569b76ef22c4bfb8276d6102b0d2649ac6b75412ff40c94461a0f38507b8da42bf84278457457933367d0e9f88597541c70282bab6cd
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3uy:bIDOw9a0Dwo3P1ojvUSD79Rz
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-