General
-
Target
2024-05-13_d5ef1a51b704d287ee20cb595e5f9a8f_cryptolocker
-
Size
50KB
-
Sample
240513-1gfnrafb95
-
MD5
d5ef1a51b704d287ee20cb595e5f9a8f
-
SHA1
e2781aaaadbf043e0313fabeeb2acdb303729bf6
-
SHA256
ab03e5b35861db02db66095ef7f607698798fdfefde79df982da43e9e97ec3bf
-
SHA512
38f722f1c9959e57564d138c97c6810c1f04c6e3ab3158a2a6e84dc7b84fa93a9bc784d49493eb6a9fb406ac06b72bdb239a407471ace3344d47e58340b5934f
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZY/:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLi/
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-13_d5ef1a51b704d287ee20cb595e5f9a8f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-13_d5ef1a51b704d287ee20cb595e5f9a8f_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-13_d5ef1a51b704d287ee20cb595e5f9a8f_cryptolocker
-
Size
50KB
-
MD5
d5ef1a51b704d287ee20cb595e5f9a8f
-
SHA1
e2781aaaadbf043e0313fabeeb2acdb303729bf6
-
SHA256
ab03e5b35861db02db66095ef7f607698798fdfefde79df982da43e9e97ec3bf
-
SHA512
38f722f1c9959e57564d138c97c6810c1f04c6e3ab3158a2a6e84dc7b84fa93a9bc784d49493eb6a9fb406ac06b72bdb239a407471ace3344d47e58340b5934f
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZY/:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLi/
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-