General
-
Target
2024-05-13_5f0472b6858bf11b523cb119edf232a5_cryptolocker
-
Size
62KB
-
Sample
240513-svgtzach37
-
MD5
5f0472b6858bf11b523cb119edf232a5
-
SHA1
df56c81d41f506907c5a23ab670b4e7ef53c5b5e
-
SHA256
72cf897702ddde9e5f7fa2424266fe1f8b13771686cdb15546588da9222226af
-
SHA512
2bc704e6e85558af843a169bb335503419c1a7919420501ec5c7ed829b36ffe07bedb67340b594b82b776e6b996638577eddc40bf72e036c459933e58e1bb441
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnJ9:btng54SMLr+/AO/kIhfoKMHdaT
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-13_5f0472b6858bf11b523cb119edf232a5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-13_5f0472b6858bf11b523cb119edf232a5_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-13_5f0472b6858bf11b523cb119edf232a5_cryptolocker
-
Size
62KB
-
MD5
5f0472b6858bf11b523cb119edf232a5
-
SHA1
df56c81d41f506907c5a23ab670b4e7ef53c5b5e
-
SHA256
72cf897702ddde9e5f7fa2424266fe1f8b13771686cdb15546588da9222226af
-
SHA512
2bc704e6e85558af843a169bb335503419c1a7919420501ec5c7ed829b36ffe07bedb67340b594b82b776e6b996638577eddc40bf72e036c459933e58e1bb441
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnJ9:btng54SMLr+/AO/kIhfoKMHdaT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-