General
-
Target
2024-05-04_4e5b391f3989111caface62a3a635532_cryptolocker
-
Size
51KB
-
Sample
240504-s6bgbsdb37
-
MD5
4e5b391f3989111caface62a3a635532
-
SHA1
d676ed94b291d7a6eb51d7ce14f8ad4008ae35c1
-
SHA256
bf2e3bb2b07e532e11bc3e0a9686bcb36ebb259a1616fe52f44855b7a373799a
-
SHA512
e66a3110ddd3c28b80317b1cf87ea842fe2ce178a95b894a478871e145ceadbd4715008157923117c9995e84e584520937f01f534c45bb3682f46e251b22a36e
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIs:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7v
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_4e5b391f3989111caface62a3a635532_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-04_4e5b391f3989111caface62a3a635532_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-04_4e5b391f3989111caface62a3a635532_cryptolocker
-
Size
51KB
-
MD5
4e5b391f3989111caface62a3a635532
-
SHA1
d676ed94b291d7a6eb51d7ce14f8ad4008ae35c1
-
SHA256
bf2e3bb2b07e532e11bc3e0a9686bcb36ebb259a1616fe52f44855b7a373799a
-
SHA512
e66a3110ddd3c28b80317b1cf87ea842fe2ce178a95b894a478871e145ceadbd4715008157923117c9995e84e584520937f01f534c45bb3682f46e251b22a36e
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIs:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7v
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-