General
-
Target
2024-05-08_1f0e1df98f63da05d0b032ff93f14da9_cryptolocker
-
Size
43KB
-
Sample
240508-e25bysdc68
-
MD5
1f0e1df98f63da05d0b032ff93f14da9
-
SHA1
3c182644b07f3b4334b8730d1c795be80c96181e
-
SHA256
3f63d46ad881aca7fe5434738594aff73c18cb78447a60c491602cd25cd88982
-
SHA512
1789909902c609a4b0ffcce0a58dc57a98507d0084ee74b08568c5f9e7dc9b7b175fd780f761c27ff8e623fa02ee1498be9b7689617a133157c3f1225c9a4e60
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9HxC:X6QFElP6n+gJQMOtEvwDpjBmzDkWDtQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_1f0e1df98f63da05d0b032ff93f14da9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-08_1f0e1df98f63da05d0b032ff93f14da9_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-08_1f0e1df98f63da05d0b032ff93f14da9_cryptolocker
-
Size
43KB
-
MD5
1f0e1df98f63da05d0b032ff93f14da9
-
SHA1
3c182644b07f3b4334b8730d1c795be80c96181e
-
SHA256
3f63d46ad881aca7fe5434738594aff73c18cb78447a60c491602cd25cd88982
-
SHA512
1789909902c609a4b0ffcce0a58dc57a98507d0084ee74b08568c5f9e7dc9b7b175fd780f761c27ff8e623fa02ee1498be9b7689617a133157c3f1225c9a4e60
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9HxC:X6QFElP6n+gJQMOtEvwDpjBmzDkWDtQ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-