General
-
Target
2024-05-15_2cf98b2abd9b5075f3b9bc2a889f65fc_cryptolocker
-
Size
66KB
-
Sample
240515-dy8drsfc94
-
MD5
2cf98b2abd9b5075f3b9bc2a889f65fc
-
SHA1
c2fbec9c3dbaa88efc5856cde35e9e2c5625f659
-
SHA256
d4e2705885631e8693391645c1ad9cacf2c0491fae740350bb29517b3360297d
-
SHA512
2e56682d079c030ab5896d5b1c902130c6bbb41384f4a73268561268d9c6cfd4e7c893efa979193fd44b43f6f1b629c44b80af2ec768eb28b00a1ed148601bd0
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGyo:TCjsIOtEvwDpj5HE/OUHnSMYD
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_2cf98b2abd9b5075f3b9bc2a889f65fc_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-15_2cf98b2abd9b5075f3b9bc2a889f65fc_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-15_2cf98b2abd9b5075f3b9bc2a889f65fc_cryptolocker
-
Size
66KB
-
MD5
2cf98b2abd9b5075f3b9bc2a889f65fc
-
SHA1
c2fbec9c3dbaa88efc5856cde35e9e2c5625f659
-
SHA256
d4e2705885631e8693391645c1ad9cacf2c0491fae740350bb29517b3360297d
-
SHA512
2e56682d079c030ab5896d5b1c902130c6bbb41384f4a73268561268d9c6cfd4e7c893efa979193fd44b43f6f1b629c44b80af2ec768eb28b00a1ed148601bd0
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGyo:TCjsIOtEvwDpj5HE/OUHnSMYD
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-