General
-
Target
2024-05-24_d768feed91f2b0601fbbd3c1bc6d784b_cryptolocker
-
Size
30KB
-
Sample
240524-jrnnnsad6z
-
MD5
d768feed91f2b0601fbbd3c1bc6d784b
-
SHA1
930b465f8c795a96883b7ab26e64984a50c18e7a
-
SHA256
9e033cadaba7e854a95a1c36255603f84b0d6e35f898805af1bb3e5c63b67867
-
SHA512
5e344431aaf96422ab6e58424585afeb0c6d7017ebccf327a03b04db14c94a2a9e56c0a067c9cb1f65bc86f249da5c3f98d2110f7ed62d61e1ea96b77f3285ec
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfM:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X5
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_d768feed91f2b0601fbbd3c1bc6d784b_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-24_d768feed91f2b0601fbbd3c1bc6d784b_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-24_d768feed91f2b0601fbbd3c1bc6d784b_cryptolocker
-
Size
30KB
-
MD5
d768feed91f2b0601fbbd3c1bc6d784b
-
SHA1
930b465f8c795a96883b7ab26e64984a50c18e7a
-
SHA256
9e033cadaba7e854a95a1c36255603f84b0d6e35f898805af1bb3e5c63b67867
-
SHA512
5e344431aaf96422ab6e58424585afeb0c6d7017ebccf327a03b04db14c94a2a9e56c0a067c9cb1f65bc86f249da5c3f98d2110f7ed62d61e1ea96b77f3285ec
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfM:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X5
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-