General
-
Target
2024-05-12_b9bbff0d1abd465ce4c0960c41ded006_cryptolocker
-
Size
86KB
-
Sample
240512-he5wrage35
-
MD5
b9bbff0d1abd465ce4c0960c41ded006
-
SHA1
28e5b232d943d004876da8d3c8edd0a057849fe2
-
SHA256
ce942d26ac7d21db88a7cf04518eedbca0cfcece48f134978bff389c883989ba
-
SHA512
b1c572179d6ab62f359fa59d3ea09bf513d68b2850a5224cbb450c02d4b03418d93d2f4109a74c395174a46a3abb5d03cbe909e398cccfbce1fc60dec1aaf42a
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBgU:vCjsIOtEvwDpj5H9YvQd25
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-12_b9bbff0d1abd465ce4c0960c41ded006_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-12_b9bbff0d1abd465ce4c0960c41ded006_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-12_b9bbff0d1abd465ce4c0960c41ded006_cryptolocker
-
Size
86KB
-
MD5
b9bbff0d1abd465ce4c0960c41ded006
-
SHA1
28e5b232d943d004876da8d3c8edd0a057849fe2
-
SHA256
ce942d26ac7d21db88a7cf04518eedbca0cfcece48f134978bff389c883989ba
-
SHA512
b1c572179d6ab62f359fa59d3ea09bf513d68b2850a5224cbb450c02d4b03418d93d2f4109a74c395174a46a3abb5d03cbe909e398cccfbce1fc60dec1aaf42a
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBgU:vCjsIOtEvwDpj5H9YvQd25
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-