General
-
Target
2024-04-20_85fddc3987e63be66036e42c1630d743_cryptolocker
-
Size
84KB
-
Sample
240420-hfc75aag96
-
MD5
85fddc3987e63be66036e42c1630d743
-
SHA1
d68c7c6cbd0b1113cbb90ba18b4200697c14fdde
-
SHA256
b134d70d2cdbcfbcf2d63dabe51ff69a9d0679c55a6f3e8e467bd121fd7af881
-
SHA512
ae9d9fb8b523e52ecda7c12d388f18d018e5dd97e8896e82e4266f50f1b8aae1d28fe7d7ce8cda214c7ca24762c87675fe5f08a556be3b5a0e3b647c1f020cd6
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNB5:vCjsIOtEvwDpj5H9YvQd2x
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_85fddc3987e63be66036e42c1630d743_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-20_85fddc3987e63be66036e42c1630d743_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-20_85fddc3987e63be66036e42c1630d743_cryptolocker
-
Size
84KB
-
MD5
85fddc3987e63be66036e42c1630d743
-
SHA1
d68c7c6cbd0b1113cbb90ba18b4200697c14fdde
-
SHA256
b134d70d2cdbcfbcf2d63dabe51ff69a9d0679c55a6f3e8e467bd121fd7af881
-
SHA512
ae9d9fb8b523e52ecda7c12d388f18d018e5dd97e8896e82e4266f50f1b8aae1d28fe7d7ce8cda214c7ca24762c87675fe5f08a556be3b5a0e3b647c1f020cd6
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNB5:vCjsIOtEvwDpj5H9YvQd2x
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-