General
-
Target
2024-05-22_2ba4ef6cf10ade7b5b7bbe7d5526af87_cryptolocker
-
Size
36KB
-
Sample
240522-zm43vsgb4s
-
MD5
2ba4ef6cf10ade7b5b7bbe7d5526af87
-
SHA1
72819e5e5b0d0c0800db0c595de8387a711c3226
-
SHA256
3164eeb56c120fad3a999d9aaf02c2594d6887a5ba4e3b24209595c9c373ea43
-
SHA512
4d7cc8fa454481cd53651e0da97ae359b03569d993cb481cb131102f6effe2b2b10df740536f5c762fdc6a912127037ca00e4191d36d36d089dbcf76acb53720
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qG1H2:btB9g/WItCSsAGjX7r3BTa2
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_2ba4ef6cf10ade7b5b7bbe7d5526af87_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_2ba4ef6cf10ade7b5b7bbe7d5526af87_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_2ba4ef6cf10ade7b5b7bbe7d5526af87_cryptolocker
-
Size
36KB
-
MD5
2ba4ef6cf10ade7b5b7bbe7d5526af87
-
SHA1
72819e5e5b0d0c0800db0c595de8387a711c3226
-
SHA256
3164eeb56c120fad3a999d9aaf02c2594d6887a5ba4e3b24209595c9c373ea43
-
SHA512
4d7cc8fa454481cd53651e0da97ae359b03569d993cb481cb131102f6effe2b2b10df740536f5c762fdc6a912127037ca00e4191d36d36d089dbcf76acb53720
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qG1H2:btB9g/WItCSsAGjX7r3BTa2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-