General
-
Target
2024-05-05_f1f3d9ee24317f68efa43fd0e0ea2e45_cryptolocker
-
Size
30KB
-
Sample
240505-fd2rlaaf42
-
MD5
f1f3d9ee24317f68efa43fd0e0ea2e45
-
SHA1
34baf0e51e779565f53342bf9cd4a94021fda70a
-
SHA256
0f33d34bd4c3314c336a01855e1837e015f7c7ff15991b5dcb2d1af70330fdf7
-
SHA512
4a117f50d3845672de35fa67a5aeafa46cb564d30fca3759a21ea01afc80bb864629e632fa2dd16bca1ef0d5483671d0123b70c06a382852f880060bbe7ca89c
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfE:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X5
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-05_f1f3d9ee24317f68efa43fd0e0ea2e45_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-05_f1f3d9ee24317f68efa43fd0e0ea2e45_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-05_f1f3d9ee24317f68efa43fd0e0ea2e45_cryptolocker
-
Size
30KB
-
MD5
f1f3d9ee24317f68efa43fd0e0ea2e45
-
SHA1
34baf0e51e779565f53342bf9cd4a94021fda70a
-
SHA256
0f33d34bd4c3314c336a01855e1837e015f7c7ff15991b5dcb2d1af70330fdf7
-
SHA512
4a117f50d3845672de35fa67a5aeafa46cb564d30fca3759a21ea01afc80bb864629e632fa2dd16bca1ef0d5483671d0123b70c06a382852f880060bbe7ca89c
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfE:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X5
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-