General
-
Target
2024-05-21_9491d7d55e1552c74695ee8a6261cc39_cryptolocker
-
Size
50KB
-
Sample
240521-xcv14aee53
-
MD5
9491d7d55e1552c74695ee8a6261cc39
-
SHA1
150764d6bb21ab634cc5ceb525e37646aad4b1c7
-
SHA256
04691a9de01210a6b1559ebf6083f23a4581218f4c31a8a45e77ab54d4793a68
-
SHA512
8c1ac708f83a88e46409139d3b30253b7b9226038702f71ee719724d9060222a83dd231611de5946edf1104e7b74360a4ad8c023eb9eb9d8ebeef997c009add1
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZUD:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLqD
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_9491d7d55e1552c74695ee8a6261cc39_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_9491d7d55e1552c74695ee8a6261cc39_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_9491d7d55e1552c74695ee8a6261cc39_cryptolocker
-
Size
50KB
-
MD5
9491d7d55e1552c74695ee8a6261cc39
-
SHA1
150764d6bb21ab634cc5ceb525e37646aad4b1c7
-
SHA256
04691a9de01210a6b1559ebf6083f23a4581218f4c31a8a45e77ab54d4793a68
-
SHA512
8c1ac708f83a88e46409139d3b30253b7b9226038702f71ee719724d9060222a83dd231611de5946edf1104e7b74360a4ad8c023eb9eb9d8ebeef997c009add1
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZUD:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLqD
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-