General
-
Target
2024-05-25_b2c193632dfcb9deef85278af00f50bc_cryptolocker
-
Size
41KB
-
Sample
240525-deqdvacc77
-
MD5
b2c193632dfcb9deef85278af00f50bc
-
SHA1
48270448673a0678228488415d82c6528ee1bdb3
-
SHA256
84c758c28c5c0429ae6871022854e32576f443ef230854c546ac8a0943594a77
-
SHA512
581bd4367f7a83ac51d1c8c6874623172f03213da3b92f1f82b4dc4979c56cd0a5e036daad92d141b3b8f1ee1c34127269c679a5fbf6be99ed4a677ae7999ef7
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7l:bCDOw9aMDooc+vA7l
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-25_b2c193632dfcb9deef85278af00f50bc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-25_b2c193632dfcb9deef85278af00f50bc_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-25_b2c193632dfcb9deef85278af00f50bc_cryptolocker
-
Size
41KB
-
MD5
b2c193632dfcb9deef85278af00f50bc
-
SHA1
48270448673a0678228488415d82c6528ee1bdb3
-
SHA256
84c758c28c5c0429ae6871022854e32576f443ef230854c546ac8a0943594a77
-
SHA512
581bd4367f7a83ac51d1c8c6874623172f03213da3b92f1f82b4dc4979c56cd0a5e036daad92d141b3b8f1ee1c34127269c679a5fbf6be99ed4a677ae7999ef7
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7l:bCDOw9aMDooc+vA7l
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-