General
-
Target
2024-05-21_5a119ab2429a5789adcca9dd75bcbced_cryptolocker
-
Size
43KB
-
Sample
240521-zmbfjsab2y
-
MD5
5a119ab2429a5789adcca9dd75bcbced
-
SHA1
1002b36f3972a064c7c4cfdd702e6265b9aea29c
-
SHA256
4d50cd524c8bf059b2da1d3bf5ab18481bbf9cfa30b039863898e8d4ca007954
-
SHA512
927356bdf7f631086274bfa4157dd3195600bc714ca46838c23888cf6e29983e12ff1422cbe4d7151af6a8f03a740e12a79e62fff43dfef1591a9aca4281d645
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0A:bCDOw9aMDooc+vAls
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_5a119ab2429a5789adcca9dd75bcbced_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-21_5a119ab2429a5789adcca9dd75bcbced_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_5a119ab2429a5789adcca9dd75bcbced_cryptolocker
-
Size
43KB
-
MD5
5a119ab2429a5789adcca9dd75bcbced
-
SHA1
1002b36f3972a064c7c4cfdd702e6265b9aea29c
-
SHA256
4d50cd524c8bf059b2da1d3bf5ab18481bbf9cfa30b039863898e8d4ca007954
-
SHA512
927356bdf7f631086274bfa4157dd3195600bc714ca46838c23888cf6e29983e12ff1422cbe4d7151af6a8f03a740e12a79e62fff43dfef1591a9aca4281d645
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIie0A:bCDOw9aMDooc+vAls
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-