General
-
Target
2024-04-30_6976f147a2df694f47d081590861ccd9_cryptolocker
-
Size
61KB
-
Sample
240430-f433caea3x
-
MD5
6976f147a2df694f47d081590861ccd9
-
SHA1
ec65b88946295f83dd04335eca3e7c9a23b41da7
-
SHA256
f3d75d2c61df88bed7d20fae491b5871de837629fd5b259e565a53cc17ba6568
-
SHA512
172dcc236096d45f7c4857a6ac58ad140d77660bffb2bfdd41cac6abd95274d8f172e9c32fae0312edac445d7a775ed5f8fbb29197d3d41c8ac38bb4c8b51622
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnu:btng54SMLr+/AO/kIhfoKMHdau
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_6976f147a2df694f47d081590861ccd9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_6976f147a2df694f47d081590861ccd9_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_6976f147a2df694f47d081590861ccd9_cryptolocker
-
Size
61KB
-
MD5
6976f147a2df694f47d081590861ccd9
-
SHA1
ec65b88946295f83dd04335eca3e7c9a23b41da7
-
SHA256
f3d75d2c61df88bed7d20fae491b5871de837629fd5b259e565a53cc17ba6568
-
SHA512
172dcc236096d45f7c4857a6ac58ad140d77660bffb2bfdd41cac6abd95274d8f172e9c32fae0312edac445d7a775ed5f8fbb29197d3d41c8ac38bb4c8b51622
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnu:btng54SMLr+/AO/kIhfoKMHdau
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-