General
-
Target
2024-05-17_99ed29bc8e8608bee96640ab0a9e3779_cryptolocker
-
Size
44KB
-
Sample
240517-gebr8sbh3y
-
MD5
99ed29bc8e8608bee96640ab0a9e3779
-
SHA1
5f616fa8017d32484033a11f6698bfcb8b2ce0fa
-
SHA256
d8f7bc86befff6d49bc2a58cd3eb303fbe92ce532346bedaacb9257c651edc73
-
SHA512
bca8595b95363ea26520e75478b8a17afa700a448b900b800d622f93e89f9cc551fb7044c5065bebd1ed7c8b9ffa582942a7ffca7b77d37aa26ddd601f147553
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9H5:X6QFElP6n+gJQMOtEvwDpjBmzDkWDt5
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_99ed29bc8e8608bee96640ab0a9e3779_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-17_99ed29bc8e8608bee96640ab0a9e3779_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-17_99ed29bc8e8608bee96640ab0a9e3779_cryptolocker
-
Size
44KB
-
MD5
99ed29bc8e8608bee96640ab0a9e3779
-
SHA1
5f616fa8017d32484033a11f6698bfcb8b2ce0fa
-
SHA256
d8f7bc86befff6d49bc2a58cd3eb303fbe92ce532346bedaacb9257c651edc73
-
SHA512
bca8595b95363ea26520e75478b8a17afa700a448b900b800d622f93e89f9cc551fb7044c5065bebd1ed7c8b9ffa582942a7ffca7b77d37aa26ddd601f147553
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9H5:X6QFElP6n+gJQMOtEvwDpjBmzDkWDt5
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-