General
-
Target
2024-05-11_b8581e30d6ea96b9af4ac9b512fa2e96_cryptolocker
-
Size
47KB
-
Sample
240511-xn1eyscf3z
-
MD5
b8581e30d6ea96b9af4ac9b512fa2e96
-
SHA1
57bda7994bdadc27d3e1596242f10801a5df2203
-
SHA256
bb214b257192572067c7ba48d2cd18cb1095d21987b8657ba1d236373d3a4953
-
SHA512
08cd94a05f708de922242d6cfc5761ba953ec59323475810713996526dd66bb04b5d34ad9b73d0a309c549da5c7d26a7ed994e9ce658e397beae6d007608ee13
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3khZ:79mqyNhQMOtEvwDpjBzckqyZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_b8581e30d6ea96b9af4ac9b512fa2e96_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-11_b8581e30d6ea96b9af4ac9b512fa2e96_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-11_b8581e30d6ea96b9af4ac9b512fa2e96_cryptolocker
-
Size
47KB
-
MD5
b8581e30d6ea96b9af4ac9b512fa2e96
-
SHA1
57bda7994bdadc27d3e1596242f10801a5df2203
-
SHA256
bb214b257192572067c7ba48d2cd18cb1095d21987b8657ba1d236373d3a4953
-
SHA512
08cd94a05f708de922242d6cfc5761ba953ec59323475810713996526dd66bb04b5d34ad9b73d0a309c549da5c7d26a7ed994e9ce658e397beae6d007608ee13
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3khZ:79mqyNhQMOtEvwDpjBzckqyZ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-