General
-
Target
2024-05-10_49fbaa883c6420116155bdcef92b74bd_cryptolocker
-
Size
76KB
-
Sample
240510-3dc5kafg5t
-
MD5
49fbaa883c6420116155bdcef92b74bd
-
SHA1
c06cabdc2b0c07883cb74dff10831f579bccf8d4
-
SHA256
d000ab68248879ca3906944ba7c384a886edf94c035205c5cb80b2884d07acf4
-
SHA512
83d1d4ab167ff29db217a67c60c4bcaf1e90826fb1dc22819ba8b72358198097fa7aa1f8703d7109f98e7bfc947af28732701f0f16e72a55117ea7aa192968a3
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsSljg:X6a+SOtEvwDpjBZYvQd2w
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_49fbaa883c6420116155bdcef92b74bd_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-10_49fbaa883c6420116155bdcef92b74bd_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-10_49fbaa883c6420116155bdcef92b74bd_cryptolocker
-
Size
76KB
-
MD5
49fbaa883c6420116155bdcef92b74bd
-
SHA1
c06cabdc2b0c07883cb74dff10831f579bccf8d4
-
SHA256
d000ab68248879ca3906944ba7c384a886edf94c035205c5cb80b2884d07acf4
-
SHA512
83d1d4ab167ff29db217a67c60c4bcaf1e90826fb1dc22819ba8b72358198097fa7aa1f8703d7109f98e7bfc947af28732701f0f16e72a55117ea7aa192968a3
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsSljg:X6a+SOtEvwDpjBZYvQd2w
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-