General
-
Target
2024-05-17_11a58cfdd570b533bc1207dcc0185b4a_cryptolocker
-
Size
37KB
-
Sample
240517-svlg6aea88
-
MD5
11a58cfdd570b533bc1207dcc0185b4a
-
SHA1
7a35816c6993cbd085c0f201aaad699e8d45d243
-
SHA256
124e7566f0c58165a0482b5e59625bf763d322d09ecffcbac5c01d05416f2d1e
-
SHA512
417cd25eecdb89e73cbf6386759425254565551f680b2005934c5ff3fcb92064acec1b86364738924de0cf9771a7e1ca65d6e25090cd85a4a81434162241be90
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WMx:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X3
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_11a58cfdd570b533bc1207dcc0185b4a_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-17_11a58cfdd570b533bc1207dcc0185b4a_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-17_11a58cfdd570b533bc1207dcc0185b4a_cryptolocker
-
Size
37KB
-
MD5
11a58cfdd570b533bc1207dcc0185b4a
-
SHA1
7a35816c6993cbd085c0f201aaad699e8d45d243
-
SHA256
124e7566f0c58165a0482b5e59625bf763d322d09ecffcbac5c01d05416f2d1e
-
SHA512
417cd25eecdb89e73cbf6386759425254565551f680b2005934c5ff3fcb92064acec1b86364738924de0cf9771a7e1ca65d6e25090cd85a4a81434162241be90
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WMx:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X3
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-