General
-
Target
2024-05-01_4884c900bd7a26a38c3bec980d163f16_cryptolocker
-
Size
92KB
-
Sample
240501-erk6bsfd5t
-
MD5
4884c900bd7a26a38c3bec980d163f16
-
SHA1
072bdc0a846a432c534da95fc51c962768f8f843
-
SHA256
f650750f51604b8a2fe02c8d4e910f0f1a81e058502561f94260bfec6d1c7a38
-
SHA512
f40b658b4735483fcbab2171d4edf617beb88c5e517d0ad1c7db27962022aa0108cde5c103425fad2ac8cd0e0ab9035954a1046bd677438c4b2fc0fafe2fdaba
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgL0f:V6a+pOtEvwDpjtzs
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_4884c900bd7a26a38c3bec980d163f16_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-01_4884c900bd7a26a38c3bec980d163f16_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-01_4884c900bd7a26a38c3bec980d163f16_cryptolocker
-
Size
92KB
-
MD5
4884c900bd7a26a38c3bec980d163f16
-
SHA1
072bdc0a846a432c534da95fc51c962768f8f843
-
SHA256
f650750f51604b8a2fe02c8d4e910f0f1a81e058502561f94260bfec6d1c7a38
-
SHA512
f40b658b4735483fcbab2171d4edf617beb88c5e517d0ad1c7db27962022aa0108cde5c103425fad2ac8cd0e0ab9035954a1046bd677438c4b2fc0fafe2fdaba
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgL0f:V6a+pOtEvwDpjtzs
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-