General
-
Target
2024-05-22_e5d13210eb1eb48c85c290e202e680a3_cryptolocker
-
Size
43KB
-
Sample
240522-c5f3eshh3y
-
MD5
e5d13210eb1eb48c85c290e202e680a3
-
SHA1
c8c42feab628a3d5e6ee1743b1e909d41c205d9b
-
SHA256
2a0e65afd1a53e40dcfccc8e8001f61cd11c15e2185ba18c918b5da61af8c098
-
SHA512
c0cad78bf2aec85a5960c6194fa081a7af1630eb6358df8dac4fa50caed4b5eeb6cb2e7307617437a496b81ab8f0bf54053a5a6b6f5a3449b645ca222ba34a4d
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66Tc2:vj+jsMQMOtEvwDpj5HW5sc2
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_e5d13210eb1eb48c85c290e202e680a3_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-22_e5d13210eb1eb48c85c290e202e680a3_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_e5d13210eb1eb48c85c290e202e680a3_cryptolocker
-
Size
43KB
-
MD5
e5d13210eb1eb48c85c290e202e680a3
-
SHA1
c8c42feab628a3d5e6ee1743b1e909d41c205d9b
-
SHA256
2a0e65afd1a53e40dcfccc8e8001f61cd11c15e2185ba18c918b5da61af8c098
-
SHA512
c0cad78bf2aec85a5960c6194fa081a7af1630eb6358df8dac4fa50caed4b5eeb6cb2e7307617437a496b81ab8f0bf54053a5a6b6f5a3449b645ca222ba34a4d
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66Tc2:vj+jsMQMOtEvwDpj5HW5sc2
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-