General
-
Target
2024-05-23_c75dfb706f87ff7073d64f69f10dc35d_cryptolocker
-
Size
44KB
-
Sample
240523-a42xdsfd84
-
MD5
c75dfb706f87ff7073d64f69f10dc35d
-
SHA1
ea95b575e80a41667834af978e34b6f9231bf90a
-
SHA256
647fd2602e1dbaf5dcc4ce2fde0bb7dac33b9e197b3e0767beaa93d11dd7038f
-
SHA512
836d52923825b936659a33dcb243d1d028b297edec7b59af0cbe0e6b0a7ed96054901fe89787b4baf9391b01f9f3da2cfdd529fc80585aa120804fe8cb8ce611
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUm3yK3:bm74zYcgT/Ekn0ryfj1
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_c75dfb706f87ff7073d64f69f10dc35d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_c75dfb706f87ff7073d64f69f10dc35d_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_c75dfb706f87ff7073d64f69f10dc35d_cryptolocker
-
Size
44KB
-
MD5
c75dfb706f87ff7073d64f69f10dc35d
-
SHA1
ea95b575e80a41667834af978e34b6f9231bf90a
-
SHA256
647fd2602e1dbaf5dcc4ce2fde0bb7dac33b9e197b3e0767beaa93d11dd7038f
-
SHA512
836d52923825b936659a33dcb243d1d028b297edec7b59af0cbe0e6b0a7ed96054901fe89787b4baf9391b01f9f3da2cfdd529fc80585aa120804fe8cb8ce611
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUm3yK3:bm74zYcgT/Ekn0ryfj1
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-