General
-
Target
2024-05-22_ee2356b07beb7205a8a040af01c18615_cryptolocker
-
Size
42KB
-
Sample
240522-3kcglsdc8t
-
MD5
ee2356b07beb7205a8a040af01c18615
-
SHA1
b9e5285f105a6c98da62ee83b6e7a7362bcf770d
-
SHA256
3d1a780d8316fbd2186f138d9c1ecbb35a84c220937bd35db3474a33328d0255
-
SHA512
6a58c79604090804da027a462930533f1bb2a089e6e9f8b0303a373b738fcabd8b17c7ed138268fd4671fce60c18e3a6a5aaab1dd6a5bf367a54a37431f3c50d
-
SSDEEP
768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYshNhH:i5nkFGMOtEvwDpjR+viHshNB
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_ee2356b07beb7205a8a040af01c18615_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_ee2356b07beb7205a8a040af01c18615_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_ee2356b07beb7205a8a040af01c18615_cryptolocker
-
Size
42KB
-
MD5
ee2356b07beb7205a8a040af01c18615
-
SHA1
b9e5285f105a6c98da62ee83b6e7a7362bcf770d
-
SHA256
3d1a780d8316fbd2186f138d9c1ecbb35a84c220937bd35db3474a33328d0255
-
SHA512
6a58c79604090804da027a462930533f1bb2a089e6e9f8b0303a373b738fcabd8b17c7ed138268fd4671fce60c18e3a6a5aaab1dd6a5bf367a54a37431f3c50d
-
SSDEEP
768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYshNhH:i5nkFGMOtEvwDpjR+viHshNB
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-