General
-
Target
2024-05-22_e8fc18d3e48a2ff58d8ed5b5b3881978_cryptolocker
-
Size
38KB
-
Sample
240522-dddzesaa72
-
MD5
e8fc18d3e48a2ff58d8ed5b5b3881978
-
SHA1
c69885face728c4d7b77b6e151888a2d1257d9b0
-
SHA256
1a9c91513b6a157f8b05814bd5c11d04cb5accb0dfac15990952cee5f2283256
-
SHA512
5c36df68a7e8f8451a6193e0701533eb5718d721babc0be8aa4c344d3506e4689356d31d6630774e6164629765b6f30c0e9eb65342319ee2111f9ac7e2348c76
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mq:bc/y2lLRU6zA6qq
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_e8fc18d3e48a2ff58d8ed5b5b3881978_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_e8fc18d3e48a2ff58d8ed5b5b3881978_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_e8fc18d3e48a2ff58d8ed5b5b3881978_cryptolocker
-
Size
38KB
-
MD5
e8fc18d3e48a2ff58d8ed5b5b3881978
-
SHA1
c69885face728c4d7b77b6e151888a2d1257d9b0
-
SHA256
1a9c91513b6a157f8b05814bd5c11d04cb5accb0dfac15990952cee5f2283256
-
SHA512
5c36df68a7e8f8451a6193e0701533eb5718d721babc0be8aa4c344d3506e4689356d31d6630774e6164629765b6f30c0e9eb65342319ee2111f9ac7e2348c76
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mq:bc/y2lLRU6zA6qq
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-