General
-
Target
2024-05-15_ccdaa689cdd29ec34b7b506afca7a100_cryptolocker
-
Size
44KB
-
Sample
240515-b33mzaah9x
-
MD5
ccdaa689cdd29ec34b7b506afca7a100
-
SHA1
b58ba1f071a99e260b69b965b394229718f31b32
-
SHA256
e1a9d6c60b6a186a637135605a0b9bec0f5a3499b2e88e9ac1a597118c373de2
-
SHA512
bae6db05476747cc2b55a671e7dec1041dcc945463e358acb640d310502554a6c06278a1185aa82a62fadd2de082a81f2715650cd2a397c4e888e9f46e1eab40
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpaSwB:bm74zYcgT/Ekn0ryfjR1B
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_ccdaa689cdd29ec34b7b506afca7a100_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-15_ccdaa689cdd29ec34b7b506afca7a100_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-15_ccdaa689cdd29ec34b7b506afca7a100_cryptolocker
-
Size
44KB
-
MD5
ccdaa689cdd29ec34b7b506afca7a100
-
SHA1
b58ba1f071a99e260b69b965b394229718f31b32
-
SHA256
e1a9d6c60b6a186a637135605a0b9bec0f5a3499b2e88e9ac1a597118c373de2
-
SHA512
bae6db05476747cc2b55a671e7dec1041dcc945463e358acb640d310502554a6c06278a1185aa82a62fadd2de082a81f2715650cd2a397c4e888e9f46e1eab40
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpaSwB:bm74zYcgT/Ekn0ryfjR1B
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-