General
-
Target
2024-06-08_fb16f28bdbde027a1e88bb8a0ba160d7_cryptolocker
-
Size
34KB
-
Sample
240608-ytyzraff2s
-
MD5
fb16f28bdbde027a1e88bb8a0ba160d7
-
SHA1
7d2615c147f891a518b2267e742c258bc96a02d3
-
SHA256
c5275c26ecbb8df8b8ef2bc6edaab989b03c344e6a1f6ded8e7a9a539e575486
-
SHA512
b351fe7de9d012801ea109c3cee90b5892cd56bac64a2939d8e7c43dc75a15b851bd3cf68f0121126ccbd13e7741e57abc0207c67a9b627577e5de8ff1f92acc
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjSKkcJR549Xo:b/pYayGig5Sn+5yY
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-08_fb16f28bdbde027a1e88bb8a0ba160d7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-08_fb16f28bdbde027a1e88bb8a0ba160d7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-08_fb16f28bdbde027a1e88bb8a0ba160d7_cryptolocker
-
Size
34KB
-
MD5
fb16f28bdbde027a1e88bb8a0ba160d7
-
SHA1
7d2615c147f891a518b2267e742c258bc96a02d3
-
SHA256
c5275c26ecbb8df8b8ef2bc6edaab989b03c344e6a1f6ded8e7a9a539e575486
-
SHA512
b351fe7de9d012801ea109c3cee90b5892cd56bac64a2939d8e7c43dc75a15b851bd3cf68f0121126ccbd13e7741e57abc0207c67a9b627577e5de8ff1f92acc
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjSKkcJR549Xo:b/pYayGig5Sn+5yY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-