General
-
Target
2024-05-20_c16afacdbfe181b334e7deb97c54a89b_cryptolocker
-
Size
32KB
-
Sample
240520-21bpksae26
-
MD5
c16afacdbfe181b334e7deb97c54a89b
-
SHA1
9d4d37605722204d845e97138d62f3257c95d5ab
-
SHA256
ce3c420dbf015def80d3eaf89295db6a086c7bd17a308538b7e0446a6ea973a9
-
SHA512
ce4c2acd6e2aca502d7ea326b960557534a7952c3bfb31283ea4e902f25d0f42c8bac50b60ddd2333fc300bbdc3ecf5e77593fb798ff23249a4296bd73507095
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuaD:bG74zYcgT/Ekd0ryfjq
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_c16afacdbfe181b334e7deb97c54a89b_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-20_c16afacdbfe181b334e7deb97c54a89b_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-20_c16afacdbfe181b334e7deb97c54a89b_cryptolocker
-
Size
32KB
-
MD5
c16afacdbfe181b334e7deb97c54a89b
-
SHA1
9d4d37605722204d845e97138d62f3257c95d5ab
-
SHA256
ce3c420dbf015def80d3eaf89295db6a086c7bd17a308538b7e0446a6ea973a9
-
SHA512
ce4c2acd6e2aca502d7ea326b960557534a7952c3bfb31283ea4e902f25d0f42c8bac50b60ddd2333fc300bbdc3ecf5e77593fb798ff23249a4296bd73507095
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuaD:bG74zYcgT/Ekd0ryfjq
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-