General
-
Target
2024-05-09_04fd0e561afe8c125dc594911a3b8b37_cryptolocker
-
Size
47KB
-
Sample
240509-ez2s2sdc85
-
MD5
04fd0e561afe8c125dc594911a3b8b37
-
SHA1
29bb478e5446280ec7de4527c6e90cd6e092a96d
-
SHA256
7f8e6c71779d216f2722f06094058475f0fbbd45805c78a177974e14db8f6ed6
-
SHA512
a900749861e270f35ec3c91c440973810d6070abb563b7d2e369ae141932b9b25993ef77819be8390096d8ed3d023e1f89a983041fb43d229aa645aa039e1ab8
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556yPRZL:X6QFElP6n+gJQMOtEvwDpjB0GIWvPR1
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_04fd0e561afe8c125dc594911a3b8b37_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-09_04fd0e561afe8c125dc594911a3b8b37_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-09_04fd0e561afe8c125dc594911a3b8b37_cryptolocker
-
Size
47KB
-
MD5
04fd0e561afe8c125dc594911a3b8b37
-
SHA1
29bb478e5446280ec7de4527c6e90cd6e092a96d
-
SHA256
7f8e6c71779d216f2722f06094058475f0fbbd45805c78a177974e14db8f6ed6
-
SHA512
a900749861e270f35ec3c91c440973810d6070abb563b7d2e369ae141932b9b25993ef77819be8390096d8ed3d023e1f89a983041fb43d229aa645aa039e1ab8
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556yPRZL:X6QFElP6n+gJQMOtEvwDpjB0GIWvPR1
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-