General
-
Target
2024-04-18_bbb5e72a0bbaa8022973fd2e44e0cee9_cryptolocker
-
Size
50KB
-
Sample
240418-jvdymsgg5t
-
MD5
bbb5e72a0bbaa8022973fd2e44e0cee9
-
SHA1
cf1a29d87275134cddebfe7ca7f6e5e19ddf2215
-
SHA256
a767b81a7aa045e28c5a277a8bf922a63dce86334e0598973ee70c11f454284b
-
SHA512
6ece54d8fa9fa6f4b5c0b5b35bf4daf9c14557deb66a56dcc43bb0a1968da7621971785aed23dbe0b582c1ebad8a2acc13a11895b8e23b9b8e7a6d3d40fd1291
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZS:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLo
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_bbb5e72a0bbaa8022973fd2e44e0cee9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-18_bbb5e72a0bbaa8022973fd2e44e0cee9_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-18_bbb5e72a0bbaa8022973fd2e44e0cee9_cryptolocker
-
Size
50KB
-
MD5
bbb5e72a0bbaa8022973fd2e44e0cee9
-
SHA1
cf1a29d87275134cddebfe7ca7f6e5e19ddf2215
-
SHA256
a767b81a7aa045e28c5a277a8bf922a63dce86334e0598973ee70c11f454284b
-
SHA512
6ece54d8fa9fa6f4b5c0b5b35bf4daf9c14557deb66a56dcc43bb0a1968da7621971785aed23dbe0b582c1ebad8a2acc13a11895b8e23b9b8e7a6d3d40fd1291
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZS:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLo
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-