General
-
Target
2024-05-22_e6f19baa38ce28850f85c22994459045_cryptolocker
-
Size
49KB
-
Sample
240522-dc6ytaab8t
-
MD5
e6f19baa38ce28850f85c22994459045
-
SHA1
55f2dfe8a3d630d08793204e70127cf24778be09
-
SHA256
ba004a837e42c73abebf0cd5093230150aa8118e2cdcce994463cfc553775aa5
-
SHA512
c69dc45dfb152183c744856531b453022069cbb803bb7e7196acd0ea8f4074727cd127720d0de07f75d54daa4995a96e68425a90d4d0516422e6e6fb20641ccf
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfe:X6QFElP6n+gJBMOtEvwDpjBtEdXfe
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_e6f19baa38ce28850f85c22994459045_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_e6f19baa38ce28850f85c22994459045_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_e6f19baa38ce28850f85c22994459045_cryptolocker
-
Size
49KB
-
MD5
e6f19baa38ce28850f85c22994459045
-
SHA1
55f2dfe8a3d630d08793204e70127cf24778be09
-
SHA256
ba004a837e42c73abebf0cd5093230150aa8118e2cdcce994463cfc553775aa5
-
SHA512
c69dc45dfb152183c744856531b453022069cbb803bb7e7196acd0ea8f4074727cd127720d0de07f75d54daa4995a96e68425a90d4d0516422e6e6fb20641ccf
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfe:X6QFElP6n+gJBMOtEvwDpjBtEdXfe
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-