General
-
Target
2024-05-24_b870226cafda7f850a72c2941a78578c_cryptolocker
-
Size
38KB
-
Sample
240524-p242asde73
-
MD5
b870226cafda7f850a72c2941a78578c
-
SHA1
91bb9039a81cbe845d79ecf90750f527293a6006
-
SHA256
8c0edc4c3ef3c165929f47494c2ce9f98a3089a7b147690d6853882422816348
-
SHA512
ad58a7c8976ee90e656529a97fd4145684b8415c75dca7ac8019dbdf657b813e92f4ec20394aa9abfc6d3e1492f05f2db8fa7ef18efaf6ece79d94221f65a819
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpg:bc/y2lLRU6zA6lpg
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_b870226cafda7f850a72c2941a78578c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-24_b870226cafda7f850a72c2941a78578c_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-24_b870226cafda7f850a72c2941a78578c_cryptolocker
-
Size
38KB
-
MD5
b870226cafda7f850a72c2941a78578c
-
SHA1
91bb9039a81cbe845d79ecf90750f527293a6006
-
SHA256
8c0edc4c3ef3c165929f47494c2ce9f98a3089a7b147690d6853882422816348
-
SHA512
ad58a7c8976ee90e656529a97fd4145684b8415c75dca7ac8019dbdf657b813e92f4ec20394aa9abfc6d3e1492f05f2db8fa7ef18efaf6ece79d94221f65a819
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpg:bc/y2lLRU6zA6lpg
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-