General
-
Target
2024-05-30_c42ed0cfec12359eb431f3bbd20e5701_cryptolocker
-
Size
38KB
-
Sample
240530-hsvypsab6s
-
MD5
c42ed0cfec12359eb431f3bbd20e5701
-
SHA1
33c97d343a70b04fb2f04810cf5299285eff83b3
-
SHA256
279992180d15c154e04d51517f5cda082815c378c46a29af68849f513e78b407
-
SHA512
c02bd9a8f3250e380ddebae2f9febb3a1391c222df00bdd43cbd29c90552cb2f9e13a126939499d6dd2e34f564c6b2b950aaa2b6b6361efdcef945a0ae24497d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBjb1iIJSFlWvmv350:X6QFElP6n+gJQMOtEvwDpjBngHnZ32
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_c42ed0cfec12359eb431f3bbd20e5701_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-30_c42ed0cfec12359eb431f3bbd20e5701_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-30_c42ed0cfec12359eb431f3bbd20e5701_cryptolocker
-
Size
38KB
-
MD5
c42ed0cfec12359eb431f3bbd20e5701
-
SHA1
33c97d343a70b04fb2f04810cf5299285eff83b3
-
SHA256
279992180d15c154e04d51517f5cda082815c378c46a29af68849f513e78b407
-
SHA512
c02bd9a8f3250e380ddebae2f9febb3a1391c222df00bdd43cbd29c90552cb2f9e13a126939499d6dd2e34f564c6b2b950aaa2b6b6361efdcef945a0ae24497d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBjb1iIJSFlWvmv350:X6QFElP6n+gJQMOtEvwDpjBngHnZ32
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-