General
-
Target
2024-05-09_7ad8fc15b48f048947c8da82401d1b70_cryptolocker
-
Size
43KB
-
Sample
240509-fb1rhsea99
-
MD5
7ad8fc15b48f048947c8da82401d1b70
-
SHA1
8ef37ba6b988ce391c4c05680c68a13f335543ab
-
SHA256
5667a05517b5467a5242c770952daa11d95ab6ef6a527b2686f04af3f09df6fd
-
SHA512
80dda86b837cbb18423e0e4e604920e1387b8c550772bb8f9bff81bab51274b5f2bf653209f68a5960a284b3a7b671ef272d6b945a369ce14021bb469d3bc1b0
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8uYo0nrlwfjDUB:bm74zYcgT/Ek70ryfj0
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_7ad8fc15b48f048947c8da82401d1b70_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-09_7ad8fc15b48f048947c8da82401d1b70_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-09_7ad8fc15b48f048947c8da82401d1b70_cryptolocker
-
Size
43KB
-
MD5
7ad8fc15b48f048947c8da82401d1b70
-
SHA1
8ef37ba6b988ce391c4c05680c68a13f335543ab
-
SHA256
5667a05517b5467a5242c770952daa11d95ab6ef6a527b2686f04af3f09df6fd
-
SHA512
80dda86b837cbb18423e0e4e604920e1387b8c550772bb8f9bff81bab51274b5f2bf653209f68a5960a284b3a7b671ef272d6b945a369ce14021bb469d3bc1b0
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8uYo0nrlwfjDUB:bm74zYcgT/Ek70ryfj0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-