General
-
Target
2024-04-30_35ae35e0ca70fc26573cb3fd19761345_cryptolocker
-
Size
51KB
-
Sample
240430-h7m7eafg3y
-
MD5
35ae35e0ca70fc26573cb3fd19761345
-
SHA1
d6a3617866e7adda7ce1fedd7bccf1305e30b1a0
-
SHA256
d0f17495ea2473c2ace00995b1bfb143bfd5d5e0a35ebf688e873688427dfcfa
-
SHA512
402d973658cf4e1695a3efa9b70905a241f7f3a389131b3079a46a3a1969ae352ca473487882e3bc6769300465f1209ca56ece1d8e0cee143f47041bb4449d82
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGf05:79mqyNhQMOtEvwDpjBxe8GGf2
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_35ae35e0ca70fc26573cb3fd19761345_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_35ae35e0ca70fc26573cb3fd19761345_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_35ae35e0ca70fc26573cb3fd19761345_cryptolocker
-
Size
51KB
-
MD5
35ae35e0ca70fc26573cb3fd19761345
-
SHA1
d6a3617866e7adda7ce1fedd7bccf1305e30b1a0
-
SHA256
d0f17495ea2473c2ace00995b1bfb143bfd5d5e0a35ebf688e873688427dfcfa
-
SHA512
402d973658cf4e1695a3efa9b70905a241f7f3a389131b3079a46a3a1969ae352ca473487882e3bc6769300465f1209ca56ece1d8e0cee143f47041bb4449d82
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGf05:79mqyNhQMOtEvwDpjBxe8GGf2
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-