General
-
Target
2024-05-01_3da78bf9b64b9d60610ede65e1b0cc45_cryptolocker
-
Size
62KB
-
Sample
240501-e9fzbsfh9y
-
MD5
3da78bf9b64b9d60610ede65e1b0cc45
-
SHA1
023de9c9ab3bca890b170b2320b9bcc2bb409c68
-
SHA256
c10f7768814ce30aedb8bc4e8380c0a32d42412933bd3a0e09e2d90932a8337b
-
SHA512
6dfe02f3d417afb0def3b420fe6bca2e004c9a38704e3b98e5311d6d654ee41a18ab5430ba086184fac858d98cf20af6ceee63243b1b3f905a77b17b29184e71
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaF:btng54SMLr+/AO/kIhfoKMHdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_3da78bf9b64b9d60610ede65e1b0cc45_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-01_3da78bf9b64b9d60610ede65e1b0cc45_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-01_3da78bf9b64b9d60610ede65e1b0cc45_cryptolocker
-
Size
62KB
-
MD5
3da78bf9b64b9d60610ede65e1b0cc45
-
SHA1
023de9c9ab3bca890b170b2320b9bcc2bb409c68
-
SHA256
c10f7768814ce30aedb8bc4e8380c0a32d42412933bd3a0e09e2d90932a8337b
-
SHA512
6dfe02f3d417afb0def3b420fe6bca2e004c9a38704e3b98e5311d6d654ee41a18ab5430ba086184fac858d98cf20af6ceee63243b1b3f905a77b17b29184e71
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaF:btng54SMLr+/AO/kIhfoKMHdb
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-