General
-
Target
2024-05-22_b380169897a5a15e0c9635f8bfb69ec6_cryptolocker
-
Size
62KB
-
Sample
240522-3esawadb35
-
MD5
b380169897a5a15e0c9635f8bfb69ec6
-
SHA1
3e2a96d4638f0607646ca07192c71fe2c5ee8bed
-
SHA256
6ea7f70ca22c44f5771eef4e0bcd9bd0ffb181de3b02a6f52674973df89e5e72
-
SHA512
470b4c0eb92b87c17511c1904bd4d4c72883fe1018db39d52de7c2a19b1fc657c535e621981549ab1bc37f9087f56ef47c4832d8e389625a93084617fa453e2c
-
SSDEEP
768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG95:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWBK
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_b380169897a5a15e0c9635f8bfb69ec6_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-22_b380169897a5a15e0c9635f8bfb69ec6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_b380169897a5a15e0c9635f8bfb69ec6_cryptolocker
-
Size
62KB
-
MD5
b380169897a5a15e0c9635f8bfb69ec6
-
SHA1
3e2a96d4638f0607646ca07192c71fe2c5ee8bed
-
SHA256
6ea7f70ca22c44f5771eef4e0bcd9bd0ffb181de3b02a6f52674973df89e5e72
-
SHA512
470b4c0eb92b87c17511c1904bd4d4c72883fe1018db39d52de7c2a19b1fc657c535e621981549ab1bc37f9087f56ef47c4832d8e389625a93084617fa453e2c
-
SSDEEP
768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG95:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWBK
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-