General
-
Target
2024-04-24_311ef74ae52876d7ea617a01d2358b23_cryptolocker
-
Size
36KB
-
Sample
240424-2ay27aag65
-
MD5
311ef74ae52876d7ea617a01d2358b23
-
SHA1
ed330c8959846baa4d470aadc0e23bd9364581e7
-
SHA256
fdd6f86a42cd99797994c3c8436723df17bc5b414121fbbfa4c497476423a035
-
SHA512
f6078ccf1ee347c2105e8530a1557882e06a47ad0ffb703d443b18c7dbb541d1191103951c65deaac4eb5f47798445dd3648b3e344a0866e9079550e8706e32e
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4o:fT+hsMQMOtEvwDpjoIHo
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_311ef74ae52876d7ea617a01d2358b23_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_311ef74ae52876d7ea617a01d2358b23_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_311ef74ae52876d7ea617a01d2358b23_cryptolocker
-
Size
36KB
-
MD5
311ef74ae52876d7ea617a01d2358b23
-
SHA1
ed330c8959846baa4d470aadc0e23bd9364581e7
-
SHA256
fdd6f86a42cd99797994c3c8436723df17bc5b414121fbbfa4c497476423a035
-
SHA512
f6078ccf1ee347c2105e8530a1557882e06a47ad0ffb703d443b18c7dbb541d1191103951c65deaac4eb5f47798445dd3648b3e344a0866e9079550e8706e32e
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4o:fT+hsMQMOtEvwDpjoIHo
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-