General
-
Target
2024-04-05_e009d72c973d76d77baf0182efd406cf_cryptolocker
-
Size
66KB
-
Sample
240405-sbtpesfe45
-
MD5
e009d72c973d76d77baf0182efd406cf
-
SHA1
4fe6ac9a5650e642360f51b89b5498d82120935f
-
SHA256
50dd3e4d1639431ccb6137eda55f64d4a7160c99af266425d015b8ad756b4cbb
-
SHA512
c0f959f4b8041f65fe9d7f3b3d0863cfa04e822ff35358339417486c7f057284ea061bf5b88d69c8f5fe3aa38d6953ab3d081b22d9aab79bc14bfd3b8c05cee9
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLt:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7k
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_e009d72c973d76d77baf0182efd406cf_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_e009d72c973d76d77baf0182efd406cf_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-05_e009d72c973d76d77baf0182efd406cf_cryptolocker
-
Size
66KB
-
MD5
e009d72c973d76d77baf0182efd406cf
-
SHA1
4fe6ac9a5650e642360f51b89b5498d82120935f
-
SHA256
50dd3e4d1639431ccb6137eda55f64d4a7160c99af266425d015b8ad756b4cbb
-
SHA512
c0f959f4b8041f65fe9d7f3b3d0863cfa04e822ff35358339417486c7f057284ea061bf5b88d69c8f5fe3aa38d6953ab3d081b22d9aab79bc14bfd3b8c05cee9
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLt:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7k
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-