General
-
Target
2024-04-30_c4faa8b2083798be3f08151f27e8da9e_cryptolocker
-
Size
67KB
-
Sample
240430-galrmsdf85
-
MD5
c4faa8b2083798be3f08151f27e8da9e
-
SHA1
9c2ee4b89cab68ffafcb417b9a6448efd5250c9a
-
SHA256
4331ea05b047ac180f979bb71a9bcc26c8742978fd4a17e7fd0fe66fafc05c42
-
SHA512
4197b7eb6041b3908c8fa40f2942bbeae4dad7052d2151f5158a813ebf64611df464cbab07226c9f9e044a7cc2f2162de55c58c2dbbe307c731eb27595df6290
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4wYPsED3VK2+ZtyOjgO4r9vFAg2rqk63Yg7:vj+jsMQMOtEvwDpj5HwYYTjipvF2hli
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_c4faa8b2083798be3f08151f27e8da9e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_c4faa8b2083798be3f08151f27e8da9e_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_c4faa8b2083798be3f08151f27e8da9e_cryptolocker
-
Size
67KB
-
MD5
c4faa8b2083798be3f08151f27e8da9e
-
SHA1
9c2ee4b89cab68ffafcb417b9a6448efd5250c9a
-
SHA256
4331ea05b047ac180f979bb71a9bcc26c8742978fd4a17e7fd0fe66fafc05c42
-
SHA512
4197b7eb6041b3908c8fa40f2942bbeae4dad7052d2151f5158a813ebf64611df464cbab07226c9f9e044a7cc2f2162de55c58c2dbbe307c731eb27595df6290
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4wYPsED3VK2+ZtyOjgO4r9vFAg2rqk63Yg7:vj+jsMQMOtEvwDpj5HwYYTjipvF2hli
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-