General
-
Target
2024-05-07_46188b4203291d9a2ae059b8b6dd3879_cryptolocker
-
Size
42KB
-
Sample
240507-d2hbragb4s
-
MD5
46188b4203291d9a2ae059b8b6dd3879
-
SHA1
36aabbd19f470acd91dd827e05af75ffd308c76d
-
SHA256
3401f0ded35e0835a675741002e910bae2af5031b376f6814a906c3b57cd10a6
-
SHA512
410ab3935f93dcd442b3ac1ce2c1c2661ff648b9914846623d76268d3a8c6f3d9ee2644e4b2bf00d53ee419e97349e39d3431a697ee1e6840be9dc53c6d7a587
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUw:bm74zYcgT/EkM0ryfjx
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_46188b4203291d9a2ae059b8b6dd3879_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-07_46188b4203291d9a2ae059b8b6dd3879_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-07_46188b4203291d9a2ae059b8b6dd3879_cryptolocker
-
Size
42KB
-
MD5
46188b4203291d9a2ae059b8b6dd3879
-
SHA1
36aabbd19f470acd91dd827e05af75ffd308c76d
-
SHA256
3401f0ded35e0835a675741002e910bae2af5031b376f6814a906c3b57cd10a6
-
SHA512
410ab3935f93dcd442b3ac1ce2c1c2661ff648b9914846623d76268d3a8c6f3d9ee2644e4b2bf00d53ee419e97349e39d3431a697ee1e6840be9dc53c6d7a587
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUw:bm74zYcgT/EkM0ryfjx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-