General
-
Target
2024-05-17_f2e2f514c710f0a1e52b9e87d25c329b_cryptolocker
-
Size
43KB
-
Sample
240517-zb1w3ahg2v
-
MD5
f2e2f514c710f0a1e52b9e87d25c329b
-
SHA1
797d20a7cfd46bfd3133c3bffde2f999a52f41a9
-
SHA256
16a4b01d9867d948a2a25c1cc6e3b607dae3d55422bd2a41bb96e93ad80c6248
-
SHA512
8921cd28ea8a5b2de52e5b944a4aaed02e3ce93b13d54d4d92362358e231c8e8b03947f5556fa60a5769f873a580b81a84331d460741080caf766f823c84e591
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHQ9:bCDOw9aMDooc+vAw9
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_f2e2f514c710f0a1e52b9e87d25c329b_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-17_f2e2f514c710f0a1e52b9e87d25c329b_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-17_f2e2f514c710f0a1e52b9e87d25c329b_cryptolocker
-
Size
43KB
-
MD5
f2e2f514c710f0a1e52b9e87d25c329b
-
SHA1
797d20a7cfd46bfd3133c3bffde2f999a52f41a9
-
SHA256
16a4b01d9867d948a2a25c1cc6e3b607dae3d55422bd2a41bb96e93ad80c6248
-
SHA512
8921cd28ea8a5b2de52e5b944a4aaed02e3ce93b13d54d4d92362358e231c8e8b03947f5556fa60a5769f873a580b81a84331d460741080caf766f823c84e591
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHQ9:bCDOw9aMDooc+vAw9
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-