General
-
Target
2024-05-14_5a476dd78c1d35e30bc2e698f1da1689_cryptolocker
-
Size
52KB
-
Sample
240514-edhhaaab56
-
MD5
5a476dd78c1d35e30bc2e698f1da1689
-
SHA1
d31220cc096eb5aa91a96dd7a5e6982e6586be9a
-
SHA256
06e6e14fc6b42b4e3425867f1c4b28846b22115f015f91b881d770434e67a6d7
-
SHA512
5e2df15f2c375af8dcc2883dc46fdf3bf8ef4f3f1355e70bad29edacffcb76a07736350af10c7c4a6d70fc62d5b6871889a8965ffd6e96e9665fbefcd845288b
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfepT:79mqyNhQMOtEvwDpjBxe8GGfi
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-14_5a476dd78c1d35e30bc2e698f1da1689_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-14_5a476dd78c1d35e30bc2e698f1da1689_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-14_5a476dd78c1d35e30bc2e698f1da1689_cryptolocker
-
Size
52KB
-
MD5
5a476dd78c1d35e30bc2e698f1da1689
-
SHA1
d31220cc096eb5aa91a96dd7a5e6982e6586be9a
-
SHA256
06e6e14fc6b42b4e3425867f1c4b28846b22115f015f91b881d770434e67a6d7
-
SHA512
5e2df15f2c375af8dcc2883dc46fdf3bf8ef4f3f1355e70bad29edacffcb76a07736350af10c7c4a6d70fc62d5b6871889a8965ffd6e96e9665fbefcd845288b
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfepT:79mqyNhQMOtEvwDpjBxe8GGfi
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-