General
-
Target
2024-05-21_8ce69152a7aa7deffde0ff619b1d5d34_cryptolocker
-
Size
55KB
-
Sample
240521-fr6ygaaa88
-
MD5
8ce69152a7aa7deffde0ff619b1d5d34
-
SHA1
b58bd43d1b714d3d2eaebe6e70f0233634e74d02
-
SHA256
14c91922318520021b2b6477caf6d9f777046237464991065398eab2434e5064
-
SHA512
920e74cca8b5d17ce2225268b8e27b42b06da276d139fa97827546f5adf61097af389ac346dd77f901d4f560bc65f5c29d344b7885e7ffa7c3219228a3f312e8
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puaH:bIDOw9a0DwitDZzcTLaH
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_8ce69152a7aa7deffde0ff619b1d5d34_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-21_8ce69152a7aa7deffde0ff619b1d5d34_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-21_8ce69152a7aa7deffde0ff619b1d5d34_cryptolocker
-
Size
55KB
-
MD5
8ce69152a7aa7deffde0ff619b1d5d34
-
SHA1
b58bd43d1b714d3d2eaebe6e70f0233634e74d02
-
SHA256
14c91922318520021b2b6477caf6d9f777046237464991065398eab2434e5064
-
SHA512
920e74cca8b5d17ce2225268b8e27b42b06da276d139fa97827546f5adf61097af389ac346dd77f901d4f560bc65f5c29d344b7885e7ffa7c3219228a3f312e8
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puaH:bIDOw9a0DwitDZzcTLaH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-