General
-
Target
2024-05-09_7173bb82bcad998f6bca13ed45b4c792_cryptolocker
-
Size
51KB
-
Sample
240509-3ez1qadb3x
-
MD5
7173bb82bcad998f6bca13ed45b4c792
-
SHA1
04d129ede3d54bbf2250fedb97ef6be361c98f9e
-
SHA256
f30b5fe97d5f0d47b0d714e752ba3f33f59feaacff561645651963a6486ce93a
-
SHA512
f48f4bfedc3ba7c69215aaffe0a4091d948e0b94b684dfaf380d693b48ceecc8d8316f4e1ba6d1a5a3f9464e3ebd89a1136ece0b0acff690876c60a22895aef4
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxcOQ:X6QFElP6n+gJBMOtEvwDpjBtExLQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_7173bb82bcad998f6bca13ed45b4c792_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-09_7173bb82bcad998f6bca13ed45b4c792_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-09_7173bb82bcad998f6bca13ed45b4c792_cryptolocker
-
Size
51KB
-
MD5
7173bb82bcad998f6bca13ed45b4c792
-
SHA1
04d129ede3d54bbf2250fedb97ef6be361c98f9e
-
SHA256
f30b5fe97d5f0d47b0d714e752ba3f33f59feaacff561645651963a6486ce93a
-
SHA512
f48f4bfedc3ba7c69215aaffe0a4091d948e0b94b684dfaf380d693b48ceecc8d8316f4e1ba6d1a5a3f9464e3ebd89a1136ece0b0acff690876c60a22895aef4
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxcOQ:X6QFElP6n+gJBMOtEvwDpjBtExLQ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-