General
- Target 2024-04-26_0cf25db13e28609b788b10be4df793f2_cryptolocker
- Size 47KB
- Sample240426-e2gkwsaa24
- SHA256 6421386a233cccb9bc3b7e40ba083798e729db181ab51b1cb68558664fbe58e6
- MD5 0cf25db13e28609b788b10be4df793f2
- SHA1 1408d8890ce1369f54b8dc8ea175ebf0d9b3c6fa
- SHA512 a31d49ea1a893a021093d6c3366cd769cd86936ee96089ee943b1f4878c1f37cb6cc47a8f4e765408c83511513da38a57685f76df982f93e567416a7754d6c85
- SSDEEP 768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDFUzKt:79mqyNhQMOtEvwDpjBzck1Wxt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-04-26_0cf25db13e28609b788b10be4df793f2_cryptolocker.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-26_0cf25db13e28609b788b10be4df793f2_cryptolocker.exe
Resource
win10v2004-20240412-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-04-26_0cf25db13e28609b788b10be4df793f2_cryptolocker
- Size 47KB
- SHA256 6421386a233cccb9bc3b7e40ba083798e729db181ab51b1cb68558664fbe58e6
- MD5 0cf25db13e28609b788b10be4df793f2
- SHA1 1408d8890ce1369f54b8dc8ea175ebf0d9b3c6fa
- SHA512 a31d49ea1a893a021093d6c3366cd769cd86936ee96089ee943b1f4878c1f37cb6cc47a8f4e765408c83511513da38a57685f76df982f93e567416a7754d6c85
- SSDEEP 768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDFUzKt:79mqyNhQMOtEvwDpjBzck1Wxt
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL