General
-
Target
2024-05-17_053ef5dd7d2ae1b1a364c1b96fc1f294_cryptolocker
-
Size
41KB
-
Sample
240517-ss6ejsea32
-
MD5
053ef5dd7d2ae1b1a364c1b96fc1f294
-
SHA1
60a146035fd3f6a882060ba38f32868eede39dce
-
SHA256
ac3879d7166fdec0433b3bf94f39a7a486f503d42d944c4c5abc60000759ff6e
-
SHA512
f768911d5779fc1373f7334085de8c173bc28633e9e3addf68b53d56cae85bd2c1f7ee47eab01baf609a005bf26444f702f150ab07e4ba153ca6c914cc0f413c
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrsz:X6QFElP6n+gJQMOtEvwDpjBsYK6rG
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_053ef5dd7d2ae1b1a364c1b96fc1f294_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-17_053ef5dd7d2ae1b1a364c1b96fc1f294_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-17_053ef5dd7d2ae1b1a364c1b96fc1f294_cryptolocker
-
Size
41KB
-
MD5
053ef5dd7d2ae1b1a364c1b96fc1f294
-
SHA1
60a146035fd3f6a882060ba38f32868eede39dce
-
SHA256
ac3879d7166fdec0433b3bf94f39a7a486f503d42d944c4c5abc60000759ff6e
-
SHA512
f768911d5779fc1373f7334085de8c173bc28633e9e3addf68b53d56cae85bd2c1f7ee47eab01baf609a005bf26444f702f150ab07e4ba153ca6c914cc0f413c
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrsz:X6QFElP6n+gJQMOtEvwDpjBsYK6rG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-