General
-
Target
2024-05-10_60838f40eac5ea2ba6d36e64797bdf8d_cryptolocker
-
Size
50KB
-
Sample
240510-dej7tseh5y
-
MD5
60838f40eac5ea2ba6d36e64797bdf8d
-
SHA1
ed982e113dedf97d075f85b5877b5e82a5b44ce8
-
SHA256
3cf552d5e55d46f64468149ba01ee30da79d8e9e23dfe63c558f04809a804e97
-
SHA512
e962d171fcc18e345302beadf68da2e89ce7a118d6faef38c336ae380556a28b1a91756fd455cd33c0b88527654e8fa7cc0a237bb5eaec3bbb756c37a8dfab88
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZYY:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLiY
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_60838f40eac5ea2ba6d36e64797bdf8d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-10_60838f40eac5ea2ba6d36e64797bdf8d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-10_60838f40eac5ea2ba6d36e64797bdf8d_cryptolocker
-
Size
50KB
-
MD5
60838f40eac5ea2ba6d36e64797bdf8d
-
SHA1
ed982e113dedf97d075f85b5877b5e82a5b44ce8
-
SHA256
3cf552d5e55d46f64468149ba01ee30da79d8e9e23dfe63c558f04809a804e97
-
SHA512
e962d171fcc18e345302beadf68da2e89ce7a118d6faef38c336ae380556a28b1a91756fd455cd33c0b88527654e8fa7cc0a237bb5eaec3bbb756c37a8dfab88
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZYY:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLiY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-