General
-
Target
2024-05-23_faf996102965acce91f55ca6334586c3_cryptolocker
-
Size
53KB
-
Sample
240523-bc75rsfh52
-
MD5
faf996102965acce91f55ca6334586c3
-
SHA1
c7c5fcd430975631728620c6b5d57fd002b6056a
-
SHA256
c2d2ba3440ead57b50f253a46ded94f0fc3676a622e34035fa281def6c298194
-
SHA512
9f1ecb93fc7862f2763b763b358255969b3756da6c8295900734f17394fa24bcbd11ab19cb43359ac6355b0cc58775f773eb3aeee2a79f0463ee29efdc495cbc
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKx6Y:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7j
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_faf996102965acce91f55ca6334586c3_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-23_faf996102965acce91f55ca6334586c3_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_faf996102965acce91f55ca6334586c3_cryptolocker
-
Size
53KB
-
MD5
faf996102965acce91f55ca6334586c3
-
SHA1
c7c5fcd430975631728620c6b5d57fd002b6056a
-
SHA256
c2d2ba3440ead57b50f253a46ded94f0fc3676a622e34035fa281def6c298194
-
SHA512
9f1ecb93fc7862f2763b763b358255969b3756da6c8295900734f17394fa24bcbd11ab19cb43359ac6355b0cc58775f773eb3aeee2a79f0463ee29efdc495cbc
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKx6Y:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7j
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-