General
-
Target
2024-05-22_6280b4a510b5a2c3fd055a62b3f419a0_cryptolocker
-
Size
73KB
-
Sample
240522-c4fehahg8z
-
MD5
6280b4a510b5a2c3fd055a62b3f419a0
-
SHA1
ba6b49716e894788d9631db0621213a55949fa49
-
SHA256
24f4e4787a03f402c4c7a636f6ea15b7584ba80bf10a06904c0eb2b4dff0e18a
-
SHA512
ca2666a0b8eb9b9e90993b140ac8421a35ebfcd87e38689b9db9b0094fd67b8ce2a27aff30c6d3ff80acf258c2dd2580fc65f8d782964a1cb016bf2484ff097c
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsY:u6QFElP6n+gWMOtEvwDpjJGYQbY
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_6280b4a510b5a2c3fd055a62b3f419a0_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_6280b4a510b5a2c3fd055a62b3f419a0_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_6280b4a510b5a2c3fd055a62b3f419a0_cryptolocker
-
Size
73KB
-
MD5
6280b4a510b5a2c3fd055a62b3f419a0
-
SHA1
ba6b49716e894788d9631db0621213a55949fa49
-
SHA256
24f4e4787a03f402c4c7a636f6ea15b7584ba80bf10a06904c0eb2b4dff0e18a
-
SHA512
ca2666a0b8eb9b9e90993b140ac8421a35ebfcd87e38689b9db9b0094fd67b8ce2a27aff30c6d3ff80acf258c2dd2580fc65f8d782964a1cb016bf2484ff097c
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsY:u6QFElP6n+gWMOtEvwDpjJGYQbY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-