General
-
Target
2024-05-21_4e3cff9b2034e5ef5cf9c26fd154b2a8_cryptolocker
-
Size
54KB
-
Sample
240521-s1mx6sae75
-
MD5
4e3cff9b2034e5ef5cf9c26fd154b2a8
-
SHA1
5dc01509b4798b6408c4a9ccb5a0f9d287af5668
-
SHA256
99441ccf0c32adef155667ee4aedb8205401050227080efb4e3e29a1eb032f09
-
SHA512
924d68596098bf8119bc9c22c54ad36a723fdbf5b5e4bc7f3d5f7cb321b0ec54e04a46d567f35861013596c9abc5ce17467f88be4d4ac2c23c64d048d41ebe73
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9Xv+mb6uXsT:bIDOw9a0DwitDZzc16l
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_4e3cff9b2034e5ef5cf9c26fd154b2a8_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_4e3cff9b2034e5ef5cf9c26fd154b2a8_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-21_4e3cff9b2034e5ef5cf9c26fd154b2a8_cryptolocker
-
Size
54KB
-
MD5
4e3cff9b2034e5ef5cf9c26fd154b2a8
-
SHA1
5dc01509b4798b6408c4a9ccb5a0f9d287af5668
-
SHA256
99441ccf0c32adef155667ee4aedb8205401050227080efb4e3e29a1eb032f09
-
SHA512
924d68596098bf8119bc9c22c54ad36a723fdbf5b5e4bc7f3d5f7cb321b0ec54e04a46d567f35861013596c9abc5ce17467f88be4d4ac2c23c64d048d41ebe73
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9Xv+mb6uXsT:bIDOw9a0DwitDZzc16l
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-