General
-
Target
2024-05-21_801015c290b8cc3c3d5ed231d200bd5f_cryptolocker
-
Size
55KB
-
Sample
240521-s6l8tsag38
-
MD5
801015c290b8cc3c3d5ed231d200bd5f
-
SHA1
5ba5fa15f3e5510cdfc2acae559af599251b53b5
-
SHA256
dfe8855a792480676425a46c9b9df5655941ee8dce61c04f8c5060272ba8a619
-
SHA512
c2fb41767d87d328d72371fbaea57a76e081d3433a8382d6aa25415c6ff4a182bd0b802a49650d845890e5ec089c5aa462986274f0bbb75de05006850f7588a1
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puacU:bIDOw9a0DwitDZzcTLan
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_801015c290b8cc3c3d5ed231d200bd5f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-21_801015c290b8cc3c3d5ed231d200bd5f_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-21_801015c290b8cc3c3d5ed231d200bd5f_cryptolocker
-
Size
55KB
-
MD5
801015c290b8cc3c3d5ed231d200bd5f
-
SHA1
5ba5fa15f3e5510cdfc2acae559af599251b53b5
-
SHA256
dfe8855a792480676425a46c9b9df5655941ee8dce61c04f8c5060272ba8a619
-
SHA512
c2fb41767d87d328d72371fbaea57a76e081d3433a8382d6aa25415c6ff4a182bd0b802a49650d845890e5ec089c5aa462986274f0bbb75de05006850f7588a1
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puacU:bIDOw9a0DwitDZzcTLan
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-