General
-
Target
2024-05-22_803d249989d49db9671138a236cb8036_cryptolocker
-
Size
41KB
-
Sample
240522-gm3kxsed5v
-
MD5
803d249989d49db9671138a236cb8036
-
SHA1
054aa449ba310b7ebc9921e6c8f5d4772908bef5
-
SHA256
538b66cb8710498cd0aee1233a1e2bb55f8c451cb2061cc93b68253175c2db5b
-
SHA512
17609c1f1532ce385ea19ae7f6fb2c0e4b74d9fd2bcea93909b83aad343be2439b56ddf7f8981edb6dd6bd3d676a5397813e19505a1ef98baeb03b086708d04d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfr9Oro:X6QFElP6n+gJQMOtEvwDpjBsYK6r0ro
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_803d249989d49db9671138a236cb8036_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-22_803d249989d49db9671138a236cb8036_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_803d249989d49db9671138a236cb8036_cryptolocker
-
Size
41KB
-
MD5
803d249989d49db9671138a236cb8036
-
SHA1
054aa449ba310b7ebc9921e6c8f5d4772908bef5
-
SHA256
538b66cb8710498cd0aee1233a1e2bb55f8c451cb2061cc93b68253175c2db5b
-
SHA512
17609c1f1532ce385ea19ae7f6fb2c0e4b74d9fd2bcea93909b83aad343be2439b56ddf7f8981edb6dd6bd3d676a5397813e19505a1ef98baeb03b086708d04d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfr9Oro:X6QFElP6n+gJQMOtEvwDpjBsYK6r0ro
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-