General
-
Target
2024-05-27_ed320a3041b6855c69c575ae12c72f23_cryptolocker
-
Size
37KB
-
Sample
240527-da345see97
-
MD5
ed320a3041b6855c69c575ae12c72f23
-
SHA1
8f87760964684fa481417f4586ee8d2e34ad3ae3
-
SHA256
ca6bed20b0ecb679bcfbb5a42dc1b5eaea9f6d2cd1048226c64836dfc870e7f2
-
SHA512
a8c8d1f543f69c88d959d7921b1bb52a316ea28a6c288a2e00cca40e695f09cc92e720de9e0f4567af20a7065baa744a9aa4d1f1385140cc038c6098f946986d
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4N:fT+hsMQMOtEvwDpjoIHN
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_ed320a3041b6855c69c575ae12c72f23_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-27_ed320a3041b6855c69c575ae12c72f23_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-27_ed320a3041b6855c69c575ae12c72f23_cryptolocker
-
Size
37KB
-
MD5
ed320a3041b6855c69c575ae12c72f23
-
SHA1
8f87760964684fa481417f4586ee8d2e34ad3ae3
-
SHA256
ca6bed20b0ecb679bcfbb5a42dc1b5eaea9f6d2cd1048226c64836dfc870e7f2
-
SHA512
a8c8d1f543f69c88d959d7921b1bb52a316ea28a6c288a2e00cca40e695f09cc92e720de9e0f4567af20a7065baa744a9aa4d1f1385140cc038c6098f946986d
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4N:fT+hsMQMOtEvwDpjoIHN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-