General
-
Target
2024-05-03_eb2fe6b399dd39afb463c8ec2b70ec9d_cryptolocker
-
Size
34KB
-
Sample
240503-gqqqjagg7x
-
MD5
eb2fe6b399dd39afb463c8ec2b70ec9d
-
SHA1
edfb87947c346d1449973c9bafacc03b15d6a659
-
SHA256
10794b464a37eec9bc9a5362eada5888ab204e7e7dc7280c6f677c46a1b456bb
-
SHA512
5415b2bb92a48856ffbbae38f08725be74fcef70348602724f94766bb619f119bc9e2e1eb4763d382d769626e0216d89d429675ca3553553063809ad98a4207f
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5M7:bxNrC7kYo1Fxf2rYA7
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_eb2fe6b399dd39afb463c8ec2b70ec9d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-03_eb2fe6b399dd39afb463c8ec2b70ec9d_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-03_eb2fe6b399dd39afb463c8ec2b70ec9d_cryptolocker
-
Size
34KB
-
MD5
eb2fe6b399dd39afb463c8ec2b70ec9d
-
SHA1
edfb87947c346d1449973c9bafacc03b15d6a659
-
SHA256
10794b464a37eec9bc9a5362eada5888ab204e7e7dc7280c6f677c46a1b456bb
-
SHA512
5415b2bb92a48856ffbbae38f08725be74fcef70348602724f94766bb619f119bc9e2e1eb4763d382d769626e0216d89d429675ca3553553063809ad98a4207f
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5M7:bxNrC7kYo1Fxf2rYA7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-