General
-
Target
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker
-
Size
87KB
-
Sample
240601-q1h8wadg6v
-
MD5
d84798cddf27a0aa11469bb3e63cb65c
-
SHA1
ca2e54e6a06623eb705a3b1c03bfdde624f87020
-
SHA256
d3773c1be96aeaed7e1692f0ba92f1d4266b5cf048b7370439e2e6525475ed87
-
SHA512
97a32568de7e56f142171e6135f02e700e1a716682601abed1cbea22dbda7a68db201b620ba580772b7af3ffb27aea704014e54277f740557d49708457e13b4e
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6az:V6a+pOtEvwDpjvpn
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker
-
Size
87KB
-
MD5
d84798cddf27a0aa11469bb3e63cb65c
-
SHA1
ca2e54e6a06623eb705a3b1c03bfdde624f87020
-
SHA256
d3773c1be96aeaed7e1692f0ba92f1d4266b5cf048b7370439e2e6525475ed87
-
SHA512
97a32568de7e56f142171e6135f02e700e1a716682601abed1cbea22dbda7a68db201b620ba580772b7af3ffb27aea704014e54277f740557d49708457e13b4e
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6az:V6a+pOtEvwDpjvpn
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-