General
-
Target
2024-05-17_0be5f2230412c1265f77a2ef4c040f25_cryptolocker
-
Size
67KB
-
Sample
240517-ng8cjsfc8v
-
MD5
0be5f2230412c1265f77a2ef4c040f25
-
SHA1
d22ae6c046ba1ac835783e29ad4949984be0ed23
-
SHA256
5e6f103d16c0bd359572b73f77928d13fc3758a86d3bd02397fd3b2c4f3d9d0a
-
SHA512
a560c631c88865ab69dde1580f45e02cc963e12bcc228984c687affe9b80f9b6deeb0f9e62f0cbe07f6d9e69eb946334524140bfd877959d08b40b3301b26c29
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEw:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Y
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_0be5f2230412c1265f77a2ef4c040f25_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-17_0be5f2230412c1265f77a2ef4c040f25_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-17_0be5f2230412c1265f77a2ef4c040f25_cryptolocker
-
Size
67KB
-
MD5
0be5f2230412c1265f77a2ef4c040f25
-
SHA1
d22ae6c046ba1ac835783e29ad4949984be0ed23
-
SHA256
5e6f103d16c0bd359572b73f77928d13fc3758a86d3bd02397fd3b2c4f3d9d0a
-
SHA512
a560c631c88865ab69dde1580f45e02cc963e12bcc228984c687affe9b80f9b6deeb0f9e62f0cbe07f6d9e69eb946334524140bfd877959d08b40b3301b26c29
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEw:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Y
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-