General
-
Target
2024-05-11_d67c1e596fcbf78c4803cbec191f8b90_cryptolocker
-
Size
32KB
-
Sample
240511-1c9q2acg64
-
MD5
d67c1e596fcbf78c4803cbec191f8b90
-
SHA1
433bcb8e1ed3006a0aab7177e0d1efa10c1edb0f
-
SHA256
2acefa194f4b945ba52722c88c1aa8911baaf3750cf03c9dc458bbd42d4592db
-
SHA512
eb66352e2f6b274685e7b011b32194c0c7a0c94b979f2c03045c1d31da418c122b3159c235c9f542ef88964ca1efae9aceac23d6cee6bb1dc60e3cd906fc6bb5
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGOKvL:bG74zYcgT/Ekd0ryfjUvL
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_d67c1e596fcbf78c4803cbec191f8b90_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-11_d67c1e596fcbf78c4803cbec191f8b90_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-11_d67c1e596fcbf78c4803cbec191f8b90_cryptolocker
-
Size
32KB
-
MD5
d67c1e596fcbf78c4803cbec191f8b90
-
SHA1
433bcb8e1ed3006a0aab7177e0d1efa10c1edb0f
-
SHA256
2acefa194f4b945ba52722c88c1aa8911baaf3750cf03c9dc458bbd42d4592db
-
SHA512
eb66352e2f6b274685e7b011b32194c0c7a0c94b979f2c03045c1d31da418c122b3159c235c9f542ef88964ca1efae9aceac23d6cee6bb1dc60e3cd906fc6bb5
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGOKvL:bG74zYcgT/Ekd0ryfjUvL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-