General
-
Target
2024-05-01_d8f908e29c5b3008bc998f175e82b75b_cryptolocker
-
Size
61KB
-
Sample
240501-ksl2xabd8w
-
MD5
d8f908e29c5b3008bc998f175e82b75b
-
SHA1
4216a924fa2ed8563e7785bbc433cfc66741a3e4
-
SHA256
33e2d091dadca5ce9c2b8e8710b3076a64c1891ce962e9fe89efe1959d7de24a
-
SHA512
8bd35355d1d9b422a4d45363c13b65946f7cc0fb1f59e02191df23ca5ad6b7df7883944d02a34d5355a788ee4e5e1329f7a1b1f5fbca1f455724178eb9b4fa3b
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xXcr:X6a+SOtEvwDpjBrOs
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_d8f908e29c5b3008bc998f175e82b75b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-01_d8f908e29c5b3008bc998f175e82b75b_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-01_d8f908e29c5b3008bc998f175e82b75b_cryptolocker
-
Size
61KB
-
MD5
d8f908e29c5b3008bc998f175e82b75b
-
SHA1
4216a924fa2ed8563e7785bbc433cfc66741a3e4
-
SHA256
33e2d091dadca5ce9c2b8e8710b3076a64c1891ce962e9fe89efe1959d7de24a
-
SHA512
8bd35355d1d9b422a4d45363c13b65946f7cc0fb1f59e02191df23ca5ad6b7df7883944d02a34d5355a788ee4e5e1329f7a1b1f5fbca1f455724178eb9b4fa3b
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xXcr:X6a+SOtEvwDpjBrOs
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-