General
-
Target
2024-04-27_4206154e3997f2c26b810ada1d398ece_cryptolocker
-
Size
82KB
-
Sample
240427-wnrblsdf96
-
MD5
4206154e3997f2c26b810ada1d398ece
-
SHA1
2fa2f8a5891b1a30be30e4c41cbfdbff51f1b070
-
SHA256
c58c086797767ab9642474f7319e41a1341bbd080505483633c8642c2c3db1e3
-
SHA512
93a859c8f06caa68b6974d743fe687880c1c149d4248b45e81cc04df71fecbfa231113e9ed983ddd9112582fdc507665d2436cdcf95c65a76dd00a90eecdb849
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrhx:TCjsIOtEvwDpj5HE/OUHnSMd
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_4206154e3997f2c26b810ada1d398ece_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_4206154e3997f2c26b810ada1d398ece_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-27_4206154e3997f2c26b810ada1d398ece_cryptolocker
-
Size
82KB
-
MD5
4206154e3997f2c26b810ada1d398ece
-
SHA1
2fa2f8a5891b1a30be30e4c41cbfdbff51f1b070
-
SHA256
c58c086797767ab9642474f7319e41a1341bbd080505483633c8642c2c3db1e3
-
SHA512
93a859c8f06caa68b6974d743fe687880c1c149d4248b45e81cc04df71fecbfa231113e9ed983ddd9112582fdc507665d2436cdcf95c65a76dd00a90eecdb849
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrhx:TCjsIOtEvwDpj5HE/OUHnSMd
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-