General
-
Target
2024-05-22_4300c5cc31350b98947b25f70810290f_cryptolocker
-
Size
64KB
-
Sample
240522-czhdashf6x
-
MD5
4300c5cc31350b98947b25f70810290f
-
SHA1
1f61b45b4808c02cedd5d231262267c47be38baa
-
SHA256
dc0a4db5abb5eb59ab67da5c063f6da9339f7311655cdb249d69b6fed2bd6a4e
-
SHA512
17f82f7fee2c3c7465eb5eb0d3b5f62e8ff2727bdd6acd71ea3fae3ed51f14dfd6665c1f9dc16e8d6223afcc810f14d645fb0c894e612e62c3441c17b64f2c9e
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzogj:X6a+SOtEvwDpjBrOV
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_4300c5cc31350b98947b25f70810290f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_4300c5cc31350b98947b25f70810290f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_4300c5cc31350b98947b25f70810290f_cryptolocker
-
Size
64KB
-
MD5
4300c5cc31350b98947b25f70810290f
-
SHA1
1f61b45b4808c02cedd5d231262267c47be38baa
-
SHA256
dc0a4db5abb5eb59ab67da5c063f6da9339f7311655cdb249d69b6fed2bd6a4e
-
SHA512
17f82f7fee2c3c7465eb5eb0d3b5f62e8ff2727bdd6acd71ea3fae3ed51f14dfd6665c1f9dc16e8d6223afcc810f14d645fb0c894e612e62c3441c17b64f2c9e
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzogj:X6a+SOtEvwDpjBrOV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-