General
-
Target
2024-05-10_076f0d291e12203289e5248b61acaea2_cryptolocker
-
Size
32KB
-
Sample
240510-dy731agb7w
-
MD5
076f0d291e12203289e5248b61acaea2
-
SHA1
72e1a40952bc4c70b17bad4b2ed7579824dfe872
-
SHA256
a7645469e4f2ad555199abee18f8ba333b168285e47156700c7dbbd5a8d78984
-
SHA512
83ac01ca4b356fd1e7dcb26a290198988dac44fe1555feccdce52f9fb1b40002e3ac891218d6a6c64a014fd1a330cfc1db4761f5097af01bfbe55be4193d1bff
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvxF:bG74zYcgT/Ekd0ryfjkj
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_076f0d291e12203289e5248b61acaea2_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-10_076f0d291e12203289e5248b61acaea2_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-10_076f0d291e12203289e5248b61acaea2_cryptolocker
-
Size
32KB
-
MD5
076f0d291e12203289e5248b61acaea2
-
SHA1
72e1a40952bc4c70b17bad4b2ed7579824dfe872
-
SHA256
a7645469e4f2ad555199abee18f8ba333b168285e47156700c7dbbd5a8d78984
-
SHA512
83ac01ca4b356fd1e7dcb26a290198988dac44fe1555feccdce52f9fb1b40002e3ac891218d6a6c64a014fd1a330cfc1db4761f5097af01bfbe55be4193d1bff
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvxF:bG74zYcgT/Ekd0ryfjkj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-