General
-
Target
2024-04-27_339350fee68e5cdb107ade59e49f29cd_cryptolocker
-
Size
52KB
-
Sample
240427-e6542sbh6s
-
MD5
339350fee68e5cdb107ade59e49f29cd
-
SHA1
1ecd9ef0685841087701ec3900072a2f493fffd4
-
SHA256
d05a8f99b87d7c64adeba25f1959f66472dbec6ebd6fc3659e0fa639e7a4c66b
-
SHA512
746462f04c57ee8cd2c9cfc4846c16efc1e7c4e59cc629b8ea1d7307dadb76680deec266317d5ae4501b3a6917205d0636e8c3bb5c0f439f3c0e9fed1a77f8ee
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gj2:bgGYcA/53GAA6y37Q6dI+d5QG6
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_339350fee68e5cdb107ade59e49f29cd_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-27_339350fee68e5cdb107ade59e49f29cd_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_339350fee68e5cdb107ade59e49f29cd_cryptolocker
-
Size
52KB
-
MD5
339350fee68e5cdb107ade59e49f29cd
-
SHA1
1ecd9ef0685841087701ec3900072a2f493fffd4
-
SHA256
d05a8f99b87d7c64adeba25f1959f66472dbec6ebd6fc3659e0fa639e7a4c66b
-
SHA512
746462f04c57ee8cd2c9cfc4846c16efc1e7c4e59cc629b8ea1d7307dadb76680deec266317d5ae4501b3a6917205d0636e8c3bb5c0f439f3c0e9fed1a77f8ee
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gj2:bgGYcA/53GAA6y37Q6dI+d5QG6
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-