General
-
Target
2024-04-21_2d38f00a02e66926d8212a437a99249e_cryptolocker
-
Size
81KB
-
Sample
240421-fc21zabg9x
-
MD5
2d38f00a02e66926d8212a437a99249e
-
SHA1
a811380a88100e542841d799fc2489dc1cb4f4de
-
SHA256
a9d67298413371f425d835af40252c5889af1873af8bcb1759d1c31f6ededbe2
-
SHA512
6eda0598368654a731c16122298092643bc894d9bee4b2bc4021c69fc2977cc66e653b04ee796bad1817eae336e2582ca96734dcc57801b083fdbbcd7e6f33cc
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVX:vCjsIOtEvwDpj5H9YvQd2s
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-21_2d38f00a02e66926d8212a437a99249e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-21_2d38f00a02e66926d8212a437a99249e_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-21_2d38f00a02e66926d8212a437a99249e_cryptolocker
-
Size
81KB
-
MD5
2d38f00a02e66926d8212a437a99249e
-
SHA1
a811380a88100e542841d799fc2489dc1cb4f4de
-
SHA256
a9d67298413371f425d835af40252c5889af1873af8bcb1759d1c31f6ededbe2
-
SHA512
6eda0598368654a731c16122298092643bc894d9bee4b2bc4021c69fc2977cc66e653b04ee796bad1817eae336e2582ca96734dcc57801b083fdbbcd7e6f33cc
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVX:vCjsIOtEvwDpj5H9YvQd2s
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-