General
-
Target
2024-04-29_111f3fc5e97ea646e0dc1c7c8ba2865f_cryptolocker
-
Size
39KB
-
Sample
240429-f28j2sbh8w
-
MD5
111f3fc5e97ea646e0dc1c7c8ba2865f
-
SHA1
5f28905cf774dfdb24372fa3f7c09a1a6bdbf4e0
-
SHA256
5b26f7cbba79d635cee908a77151a297761cd5e2e963bd76f0327b6a7b485397
-
SHA512
c90cd6d7b09f2dd9dcc89a3231ee7ded06ca55bebc9f3c0e6c29a47a7e7d9dd2bb207f55cf140cf9d7e6c9d7b2d52b1726db9f4279dde4a7867ab68fa75d4ffe
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLNWR:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLI
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_111f3fc5e97ea646e0dc1c7c8ba2865f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-29_111f3fc5e97ea646e0dc1c7c8ba2865f_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_111f3fc5e97ea646e0dc1c7c8ba2865f_cryptolocker
-
Size
39KB
-
MD5
111f3fc5e97ea646e0dc1c7c8ba2865f
-
SHA1
5f28905cf774dfdb24372fa3f7c09a1a6bdbf4e0
-
SHA256
5b26f7cbba79d635cee908a77151a297761cd5e2e963bd76f0327b6a7b485397
-
SHA512
c90cd6d7b09f2dd9dcc89a3231ee7ded06ca55bebc9f3c0e6c29a47a7e7d9dd2bb207f55cf140cf9d7e6c9d7b2d52b1726db9f4279dde4a7867ab68fa75d4ffe
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLNWR:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLI
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-