General
-
Target
2024-04-27_6378c308c79c24612fa4e78179e1e44a_cryptolocker
-
Size
45KB
-
Sample
240427-zbezlagc4w
-
MD5
6378c308c79c24612fa4e78179e1e44a
-
SHA1
6d83bf778d63237ddd3df76108d6d5249b71692e
-
SHA256
76309c8c0a8ee6eaf01c9cafd2c59773dbb8ac7a905679a8cd8918adef601e63
-
SHA512
9071d93f9f3607c69b384de1a0ebe967f104d81fa760a373fa01e5d5c30c3830da5ea9a3d9e15d7b066d9df7ba9fb9106c0026cf689d7bfc0808fd67a889f736
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPoO:P6QFElP6k+MRQMOtEvwDpjBQpVXzO
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_6378c308c79c24612fa4e78179e1e44a_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-27_6378c308c79c24612fa4e78179e1e44a_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_6378c308c79c24612fa4e78179e1e44a_cryptolocker
-
Size
45KB
-
MD5
6378c308c79c24612fa4e78179e1e44a
-
SHA1
6d83bf778d63237ddd3df76108d6d5249b71692e
-
SHA256
76309c8c0a8ee6eaf01c9cafd2c59773dbb8ac7a905679a8cd8918adef601e63
-
SHA512
9071d93f9f3607c69b384de1a0ebe967f104d81fa760a373fa01e5d5c30c3830da5ea9a3d9e15d7b066d9df7ba9fb9106c0026cf689d7bfc0808fd67a889f736
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPoO:P6QFElP6k+MRQMOtEvwDpjBQpVXzO
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-