General
-
Target
2024-05-22_6f6c64fc6d8de5531a4513903dde9bec_cryptolocker
-
Size
52KB
-
Sample
240522-avsx5aeg73
-
MD5
6f6c64fc6d8de5531a4513903dde9bec
-
SHA1
56bce042abf0d6b335dd3dc8f0de88910446f4e2
-
SHA256
0d0999ec062d3f87d01a0b6e6797b61c4daa662da56ff2e10e0408d551ce8631
-
SHA512
8427954b299ff26fe73135b2e7b0f77340a4dd3d72e8d8f99b7f00a4ba1d022f5178b52dfbc4e7e474ccf13e90771e92fae97ac5aa18afe9b5a056f0722d9b4d
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfaO2:79mqyNhQMOtEvwDpjBxe8GGfaR
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_6f6c64fc6d8de5531a4513903dde9bec_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_6f6c64fc6d8de5531a4513903dde9bec_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_6f6c64fc6d8de5531a4513903dde9bec_cryptolocker
-
Size
52KB
-
MD5
6f6c64fc6d8de5531a4513903dde9bec
-
SHA1
56bce042abf0d6b335dd3dc8f0de88910446f4e2
-
SHA256
0d0999ec062d3f87d01a0b6e6797b61c4daa662da56ff2e10e0408d551ce8631
-
SHA512
8427954b299ff26fe73135b2e7b0f77340a4dd3d72e8d8f99b7f00a4ba1d022f5178b52dfbc4e7e474ccf13e90771e92fae97ac5aa18afe9b5a056f0722d9b4d
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfaO2:79mqyNhQMOtEvwDpjBxe8GGfaR
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-