General
-
Target
2024-05-12_4cc7be11f6d0c8f68dd0717ae78a5793_cryptolocker
-
Size
51KB
-
Sample
240512-rwmk6sdf54
-
MD5
4cc7be11f6d0c8f68dd0717ae78a5793
-
SHA1
d9765eadcf7f94181213f42c528144b1d9ff70e3
-
SHA256
72d18a3e6b800a9fbdc62568c2ea3eb11f33b644b6d5a50a2a067888c1348499
-
SHA512
6a232255eeb4c5923e6c7ef25f48977684a572776ee828915c9fd2c2f3f34c6d9daf6d17904ae02c64deec7c14a1730a8c8b71647358443a8882b994b9cc2cb8
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZYM:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLiM
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-12_4cc7be11f6d0c8f68dd0717ae78a5793_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-12_4cc7be11f6d0c8f68dd0717ae78a5793_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-12_4cc7be11f6d0c8f68dd0717ae78a5793_cryptolocker
-
Size
51KB
-
MD5
4cc7be11f6d0c8f68dd0717ae78a5793
-
SHA1
d9765eadcf7f94181213f42c528144b1d9ff70e3
-
SHA256
72d18a3e6b800a9fbdc62568c2ea3eb11f33b644b6d5a50a2a067888c1348499
-
SHA512
6a232255eeb4c5923e6c7ef25f48977684a572776ee828915c9fd2c2f3f34c6d9daf6d17904ae02c64deec7c14a1730a8c8b71647358443a8882b994b9cc2cb8
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZYM:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLiM
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-