General
-
Target
2024-04-25_fb1864c4579e5db3b058efc0194d3a5a_cryptolocker
-
Size
70KB
-
Sample
240425-fmgssafg69
-
MD5
fb1864c4579e5db3b058efc0194d3a5a
-
SHA1
b202a3764e73f647584a3f3289f0c2cff962b94c
-
SHA256
7d14134e2d398d806edf4f8f6455e94121e068c7b2b26415c0740344238b6915
-
SHA512
9845cfab6e0d379f21ba46a31dfedc70f8ae25a98135163e7dc5f62dc1e853d061912a4067fd71024f0fd313112b79dfe3c5bc44248b511fb1bb8c253feb5558
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU50A:DW60sllyWOtEvwDpjwF85z
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_fb1864c4579e5db3b058efc0194d3a5a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_fb1864c4579e5db3b058efc0194d3a5a_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-25_fb1864c4579e5db3b058efc0194d3a5a_cryptolocker
-
Size
70KB
-
MD5
fb1864c4579e5db3b058efc0194d3a5a
-
SHA1
b202a3764e73f647584a3f3289f0c2cff962b94c
-
SHA256
7d14134e2d398d806edf4f8f6455e94121e068c7b2b26415c0740344238b6915
-
SHA512
9845cfab6e0d379f21ba46a31dfedc70f8ae25a98135163e7dc5f62dc1e853d061912a4067fd71024f0fd313112b79dfe3c5bc44248b511fb1bb8c253feb5558
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU50A:DW60sllyWOtEvwDpjwF85z
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-