General
-
Target
2024-05-27_e8c584df1e93316c6519d86e22f89a6f_cryptolocker
-
Size
43KB
-
Sample
240527-fj2zjshh65
-
MD5
e8c584df1e93316c6519d86e22f89a6f
-
SHA1
c24ac0bb7b9c037cf0c318dc29aa87ea81b98afc
-
SHA256
18ae63089fc9617399a83db062a4ed13fea9fc90f16ee65adf622a04afe3fb93
-
SHA512
b3f2a4d5ff6fc3aa59f3758206bc556cb3f9fe3dc1c9ea1754d1eba2c4f09b092fce900ac50129f893122f0a7b12af1abc9982bca08eb5cfd73c955643dd5284
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUad/:bm74zYcgT/EkM0ryfjPd/
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_e8c584df1e93316c6519d86e22f89a6f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-27_e8c584df1e93316c6519d86e22f89a6f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-27_e8c584df1e93316c6519d86e22f89a6f_cryptolocker
-
Size
43KB
-
MD5
e8c584df1e93316c6519d86e22f89a6f
-
SHA1
c24ac0bb7b9c037cf0c318dc29aa87ea81b98afc
-
SHA256
18ae63089fc9617399a83db062a4ed13fea9fc90f16ee65adf622a04afe3fb93
-
SHA512
b3f2a4d5ff6fc3aa59f3758206bc556cb3f9fe3dc1c9ea1754d1eba2c4f09b092fce900ac50129f893122f0a7b12af1abc9982bca08eb5cfd73c955643dd5284
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUad/:bm74zYcgT/EkM0ryfjPd/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-