General
-
Target
2024-06-15_4bf4a954c914268c76773a38a4dee64e_cryptolocker
-
Size
34KB
-
Sample
240615-nktcssserq
-
MD5
4bf4a954c914268c76773a38a4dee64e
-
SHA1
3d42203098eebf3a2dcd015d18dcec8ba6cf3bae
-
SHA256
78f4da13038c7a9e57e625f2292047542e1af6b005a9049d94da65a02ec8a404
-
SHA512
da1694663432cce88db92c946a9c14393c4e45cb4e4af8e0980078a361c9326bdd061b6971de7017666e06f8f1869161899d532410259d80f7cc8e5990405d4f
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcs82uMuCzE:b/yC4GyNM01GuQMNXw2PSjSKkc9/MW
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-15_4bf4a954c914268c76773a38a4dee64e_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-15_4bf4a954c914268c76773a38a4dee64e_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-15_4bf4a954c914268c76773a38a4dee64e_cryptolocker
-
Size
34KB
-
MD5
4bf4a954c914268c76773a38a4dee64e
-
SHA1
3d42203098eebf3a2dcd015d18dcec8ba6cf3bae
-
SHA256
78f4da13038c7a9e57e625f2292047542e1af6b005a9049d94da65a02ec8a404
-
SHA512
da1694663432cce88db92c946a9c14393c4e45cb4e4af8e0980078a361c9326bdd061b6971de7017666e06f8f1869161899d532410259d80f7cc8e5990405d4f
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcs82uMuCzE:b/yC4GyNM01GuQMNXw2PSjSKkc9/MW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-