General
-
Target
2024-05-01_bf94d17bee81d14b035f884eca86b0a7_cryptolocker
-
Size
47KB
-
Sample
240501-hb5ftaab2t
-
MD5
bf94d17bee81d14b035f884eca86b0a7
-
SHA1
b36df4b7324bd0543d56b266ab9fe9f06520d478
-
SHA256
70507ecf67dd7d07649eaeedca7fe5794624dbcad0e937de8cfeba45234d3674
-
SHA512
8a254e32633acfad41caab4191bb14baa3d0ee2686ec4158646832887d6ebba3b550a4718032d48e2892cd08644498b179353d66542d1f07ef0a2856472813cb
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcF:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfF
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_bf94d17bee81d14b035f884eca86b0a7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-01_bf94d17bee81d14b035f884eca86b0a7_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-01_bf94d17bee81d14b035f884eca86b0a7_cryptolocker
-
Size
47KB
-
MD5
bf94d17bee81d14b035f884eca86b0a7
-
SHA1
b36df4b7324bd0543d56b266ab9fe9f06520d478
-
SHA256
70507ecf67dd7d07649eaeedca7fe5794624dbcad0e937de8cfeba45234d3674
-
SHA512
8a254e32633acfad41caab4191bb14baa3d0ee2686ec4158646832887d6ebba3b550a4718032d48e2892cd08644498b179353d66542d1f07ef0a2856472813cb
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcF:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-