General
-
Target
2024-05-16_15ee73883347b4b8a3a605ba59b558d8_cryptolocker
-
Size
34KB
-
Sample
240516-x6ldrace5z
-
MD5
15ee73883347b4b8a3a605ba59b558d8
-
SHA1
cba400c20e20511f1d88255c816a38bd946e91b4
-
SHA256
29cc041b3494baca6a669dc63e938eb859d9712705ca62e6ec4f492de17ea1f3
-
SHA512
f660aa5a0f7d61258f302217be6c134d37d8b9d039929cb3c5931ee8592c614a5795a4719831e9dda1d358d749ce611b399e4175e854cedcf0832f2dfa0f8961
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5M4gH:bxNrC7kYo1Fxf2rYA3H
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-16_15ee73883347b4b8a3a605ba59b558d8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-16_15ee73883347b4b8a3a605ba59b558d8_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-16_15ee73883347b4b8a3a605ba59b558d8_cryptolocker
-
Size
34KB
-
MD5
15ee73883347b4b8a3a605ba59b558d8
-
SHA1
cba400c20e20511f1d88255c816a38bd946e91b4
-
SHA256
29cc041b3494baca6a669dc63e938eb859d9712705ca62e6ec4f492de17ea1f3
-
SHA512
f660aa5a0f7d61258f302217be6c134d37d8b9d039929cb3c5931ee8592c614a5795a4719831e9dda1d358d749ce611b399e4175e854cedcf0832f2dfa0f8961
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5M4gH:bxNrC7kYo1Fxf2rYA3H
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-