General
-
Target
2024-05-17_63fa65c14dde4405a05e40627b1d2d3c_cryptolocker
-
Size
63KB
-
Sample
240517-w4rbjscf8v
-
MD5
63fa65c14dde4405a05e40627b1d2d3c
-
SHA1
275767f070445a37f63f50a0ed975becf42201f7
-
SHA256
1a9934c078aab3ca558a6bb5f036b55cd0e535e4ee18d0a6a97a308922ca74dc
-
SHA512
28ffb3ce130d136759709b9a8a136dc70969e8a63a7ba816fc555fa0c35f6ed5b03a241b0d71a3ffa36ba003fe7133d1e1a4beced0793bdf427f66b39021ac56
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wlt:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Q
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_63fa65c14dde4405a05e40627b1d2d3c_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-17_63fa65c14dde4405a05e40627b1d2d3c_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-17_63fa65c14dde4405a05e40627b1d2d3c_cryptolocker
-
Size
63KB
-
MD5
63fa65c14dde4405a05e40627b1d2d3c
-
SHA1
275767f070445a37f63f50a0ed975becf42201f7
-
SHA256
1a9934c078aab3ca558a6bb5f036b55cd0e535e4ee18d0a6a97a308922ca74dc
-
SHA512
28ffb3ce130d136759709b9a8a136dc70969e8a63a7ba816fc555fa0c35f6ed5b03a241b0d71a3ffa36ba003fe7133d1e1a4beced0793bdf427f66b39021ac56
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wlt:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Q
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-