General
-
Target
2024-04-29_5ff99995b969d706a524c68045e6c0b8_cryptolocker
-
Size
51KB
-
Sample
240429-xhew3aac41
-
MD5
5ff99995b969d706a524c68045e6c0b8
-
SHA1
681f4d83be19194e12e2226f101604f4bec122ab
-
SHA256
505969febb9cec947e49b4d4bea4fa37caa65776531b2a89123706f63bbc6adb
-
SHA512
126431d507c75de7e1c18c55b1df9ff4c04f4cce1d2b8f6bd8aa67ef70842de081362597f3672dc34a914ee2e9382b039543f10ff2c59b21ec5a618adf564027
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfS:79mqyNhQMOtEvwDpjBxe8GGfS
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_5ff99995b969d706a524c68045e6c0b8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-29_5ff99995b969d706a524c68045e6c0b8_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_5ff99995b969d706a524c68045e6c0b8_cryptolocker
-
Size
51KB
-
MD5
5ff99995b969d706a524c68045e6c0b8
-
SHA1
681f4d83be19194e12e2226f101604f4bec122ab
-
SHA256
505969febb9cec947e49b4d4bea4fa37caa65776531b2a89123706f63bbc6adb
-
SHA512
126431d507c75de7e1c18c55b1df9ff4c04f4cce1d2b8f6bd8aa67ef70842de081362597f3672dc34a914ee2e9382b039543f10ff2c59b21ec5a618adf564027
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfS:79mqyNhQMOtEvwDpjBxe8GGfS
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-