General
-
Target
2024-05-20_3e4c9f540f79847d3148941d54cccf68_cryptolocker
-
Size
43KB
-
Sample
240520-haylwagc6z
-
MD5
3e4c9f540f79847d3148941d54cccf68
-
SHA1
06883516de39ce797505c522fdcfdd369315c7da
-
SHA256
b5c07689f7787151aa672b79178c65fd8c8d8261d618ba2182139049792a0d0c
-
SHA512
2da102260ef6af7ddb042a66680c7cc970c4131b1af4a11aa62b85656858c884e0f6cbbbaf7f3ba1798b1315f08743c3651d84ff85a9ab62c9118eb0ca980465
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD95q4:X6QFElP6n+gJQMOtEvwDpjBmzDkWDrZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_3e4c9f540f79847d3148941d54cccf68_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-20_3e4c9f540f79847d3148941d54cccf68_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-20_3e4c9f540f79847d3148941d54cccf68_cryptolocker
-
Size
43KB
-
MD5
3e4c9f540f79847d3148941d54cccf68
-
SHA1
06883516de39ce797505c522fdcfdd369315c7da
-
SHA256
b5c07689f7787151aa672b79178c65fd8c8d8261d618ba2182139049792a0d0c
-
SHA512
2da102260ef6af7ddb042a66680c7cc970c4131b1af4a11aa62b85656858c884e0f6cbbbaf7f3ba1798b1315f08743c3651d84ff85a9ab62c9118eb0ca980465
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD95q4:X6QFElP6n+gJQMOtEvwDpjBmzDkWDrZ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-