General
-
Target
2024-05-04_7969a0bcacb63fab789dd5f99fc039c0_cryptolocker
-
Size
44KB
-
Sample
240504-gade9shc23
-
MD5
7969a0bcacb63fab789dd5f99fc039c0
-
SHA1
4f18164f33c7eb006a271a50ea694b3109563c8b
-
SHA256
ad5f88e5b2e384a93075e47034be4b8572535283640eb605d17c2ca17158f62f
-
SHA512
6816cd9f176ffa943a05f40f0267e84eacb9e7b0c5b61285d79b280aa9cd3c7b2c2591d750773948fdc58d22699583cab8dc771959e8279ea62a50ffce04a742
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqe:bc/y2lkF0+Beqe
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_7969a0bcacb63fab789dd5f99fc039c0_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-04_7969a0bcacb63fab789dd5f99fc039c0_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-04_7969a0bcacb63fab789dd5f99fc039c0_cryptolocker
-
Size
44KB
-
MD5
7969a0bcacb63fab789dd5f99fc039c0
-
SHA1
4f18164f33c7eb006a271a50ea694b3109563c8b
-
SHA256
ad5f88e5b2e384a93075e47034be4b8572535283640eb605d17c2ca17158f62f
-
SHA512
6816cd9f176ffa943a05f40f0267e84eacb9e7b0c5b61285d79b280aa9cd3c7b2c2591d750773948fdc58d22699583cab8dc771959e8279ea62a50ffce04a742
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqe:bc/y2lkF0+Beqe
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-