General
-
Target
2024-04-26_903fc1129f93c7db3a2188628b450c0f_cryptolocker
-
Size
42KB
-
Sample
240426-tnwvzsfc89
-
MD5
903fc1129f93c7db3a2188628b450c0f
-
SHA1
5e16a6a5826b47060290b825cc62c218b31b68cb
-
SHA256
9427334ad1e055877fc483a2f3db361d04e5e91b962f980524448ea69f25fa35
-
SHA512
20f25fd984b166790ac9ee81719077e2d3da21988a92855c6472d331da4a310e7231e7d68545c728d943de7855fca9fdad53b1f8987d1b237bddb16d5ab50fe0
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIis:bCDOw9aMDooc+vAls
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_903fc1129f93c7db3a2188628b450c0f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-26_903fc1129f93c7db3a2188628b450c0f_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_903fc1129f93c7db3a2188628b450c0f_cryptolocker
-
Size
42KB
-
MD5
903fc1129f93c7db3a2188628b450c0f
-
SHA1
5e16a6a5826b47060290b825cc62c218b31b68cb
-
SHA256
9427334ad1e055877fc483a2f3db361d04e5e91b962f980524448ea69f25fa35
-
SHA512
20f25fd984b166790ac9ee81719077e2d3da21988a92855c6472d331da4a310e7231e7d68545c728d943de7855fca9fdad53b1f8987d1b237bddb16d5ab50fe0
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIis:bCDOw9aMDooc+vAls
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-