General
-
Target
2024-05-01_0bc82b88ec1a58018c5922d4cd4a9b7a_cryptolocker
-
Size
50KB
-
Sample
240501-d1t9xsha52
-
MD5
0bc82b88ec1a58018c5922d4cd4a9b7a
-
SHA1
de1a00178cab1e555bab66a016346a5a86ed1636
-
SHA256
c09dd192dbf610a300ad552a258b0c493a868aba5a294d79fb4e0c8197475460
-
SHA512
ff435efafd35c48135f39d05643e8867d13080164976d87e37470c7d5af9de00c7d563a397e8ed99fcebaa770a399606095f478d67ce69c4322d47e7ad174c5e
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ15x8F:ZVxkGOtEvwDpjcR
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_0bc82b88ec1a58018c5922d4cd4a9b7a_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-01_0bc82b88ec1a58018c5922d4cd4a9b7a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-01_0bc82b88ec1a58018c5922d4cd4a9b7a_cryptolocker
-
Size
50KB
-
MD5
0bc82b88ec1a58018c5922d4cd4a9b7a
-
SHA1
de1a00178cab1e555bab66a016346a5a86ed1636
-
SHA256
c09dd192dbf610a300ad552a258b0c493a868aba5a294d79fb4e0c8197475460
-
SHA512
ff435efafd35c48135f39d05643e8867d13080164976d87e37470c7d5af9de00c7d563a397e8ed99fcebaa770a399606095f478d67ce69c4322d47e7ad174c5e
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ15x8F:ZVxkGOtEvwDpjcR
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-