General
-
Target
2024-05-11_af567942557daa1cce38dca391c34796_cryptolocker
-
Size
41KB
-
Sample
240511-t1jq7aad24
-
MD5
af567942557daa1cce38dca391c34796
-
SHA1
9782f9dba7ec2b32002b53b81e88040cbb2437e1
-
SHA256
86d4b60e3d52dee6a0f58492bedc1aee7f4eb90692201ca343af2559a0b423ee
-
SHA512
d231c0a7427481e587dcc272408fc121ba840a8741b51a9658f90f4f1c70c415373201090d0c74806171cfab8eab9357bc1a005ea8c9a06808508b1f11941447
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7q:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7q
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_af567942557daa1cce38dca391c34796_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-11_af567942557daa1cce38dca391c34796_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-11_af567942557daa1cce38dca391c34796_cryptolocker
-
Size
41KB
-
MD5
af567942557daa1cce38dca391c34796
-
SHA1
9782f9dba7ec2b32002b53b81e88040cbb2437e1
-
SHA256
86d4b60e3d52dee6a0f58492bedc1aee7f4eb90692201ca343af2559a0b423ee
-
SHA512
d231c0a7427481e587dcc272408fc121ba840a8741b51a9658f90f4f1c70c415373201090d0c74806171cfab8eab9357bc1a005ea8c9a06808508b1f11941447
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7q:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7q
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-