General
-
Target
2024-05-15_03fbcff82557a3836f6dd236fd483fd3_cryptolocker
-
Size
43KB
-
Sample
240515-srlnrafd6y
-
MD5
03fbcff82557a3836f6dd236fd483fd3
-
SHA1
a8605561a201cadf7c5761bd97d706bfa878425d
-
SHA256
84d641264efdd82151f9a1daa5e493787b941e03d5fd96c1de57e2d02c46e573
-
SHA512
13d710c4e608bef8a130afed8926e4d2204968e8dd671ad3af0ea848f664de297a808687fc6839d34b5a9ce224b865102024d3f990b73c126799007a26dc6f19
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHRY:bCDOw9aMDooc+vAxY
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_03fbcff82557a3836f6dd236fd483fd3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-15_03fbcff82557a3836f6dd236fd483fd3_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-15_03fbcff82557a3836f6dd236fd483fd3_cryptolocker
-
Size
43KB
-
MD5
03fbcff82557a3836f6dd236fd483fd3
-
SHA1
a8605561a201cadf7c5761bd97d706bfa878425d
-
SHA256
84d641264efdd82151f9a1daa5e493787b941e03d5fd96c1de57e2d02c46e573
-
SHA512
13d710c4e608bef8a130afed8926e4d2204968e8dd671ad3af0ea848f664de297a808687fc6839d34b5a9ce224b865102024d3f990b73c126799007a26dc6f19
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHRY:bCDOw9aMDooc+vAxY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-