General
-
Target
2024-05-03_798dcd92a3d3f9a00a3713a7f7e8f648_cryptolocker
-
Size
42KB
-
Sample
240503-3f7rysge9z
-
MD5
798dcd92a3d3f9a00a3713a7f7e8f648
-
SHA1
a22c2728f78a53f0b54f19fd6bf6f4350faf54e9
-
SHA256
a01cf2fede3f6503aae93aff27c37e07d6b6ed3f466d50e34c433257135492b3
-
SHA512
320825812b2423bff270b53f64e725650dcf85998db6cd6069c6b15e619a17e07593b381499cf7c5f535d7d6861870c41a7e07fd7f98f7b4413dc0855c6024d3
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIieB:bCDOw9aMDooc+vAl0
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_798dcd92a3d3f9a00a3713a7f7e8f648_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-03_798dcd92a3d3f9a00a3713a7f7e8f648_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-03_798dcd92a3d3f9a00a3713a7f7e8f648_cryptolocker
-
Size
42KB
-
MD5
798dcd92a3d3f9a00a3713a7f7e8f648
-
SHA1
a22c2728f78a53f0b54f19fd6bf6f4350faf54e9
-
SHA256
a01cf2fede3f6503aae93aff27c37e07d6b6ed3f466d50e34c433257135492b3
-
SHA512
320825812b2423bff270b53f64e725650dcf85998db6cd6069c6b15e619a17e07593b381499cf7c5f535d7d6861870c41a7e07fd7f98f7b4413dc0855c6024d3
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIieB:bCDOw9aMDooc+vAl0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-