General
-
Target
2024-04-22_6fd588cf9c044c6e976760f5783edac8_cryptolocker
-
Size
40KB
-
Sample
240422-cgejpaed6v
-
MD5
6fd588cf9c044c6e976760f5783edac8
-
SHA1
8b2e252adeff547fb58a9b76cba1fe0259b5f1da
-
SHA256
c3c04e0696583c27e7fba7f989fa94354cd734af298f486eef7dbf356cb7dda0
-
SHA512
d88f979701b2c49ca7f8c3b6c2dbb190b6eb7a86262be8dd03af7ec5c715b455a6d029aeddb38e3a635ea445cc0369a631dc5a917589a974f1de08a568d7650d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrYW:X6QFElP6n+gJQMOtEvwDpjBsYK6rN
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_6fd588cf9c044c6e976760f5783edac8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_6fd588cf9c044c6e976760f5783edac8_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-22_6fd588cf9c044c6e976760f5783edac8_cryptolocker
-
Size
40KB
-
MD5
6fd588cf9c044c6e976760f5783edac8
-
SHA1
8b2e252adeff547fb58a9b76cba1fe0259b5f1da
-
SHA256
c3c04e0696583c27e7fba7f989fa94354cd734af298f486eef7dbf356cb7dda0
-
SHA512
d88f979701b2c49ca7f8c3b6c2dbb190b6eb7a86262be8dd03af7ec5c715b455a6d029aeddb38e3a635ea445cc0369a631dc5a917589a974f1de08a568d7650d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrYW:X6QFElP6n+gJQMOtEvwDpjBsYK6rN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-