General
-
Target
2024-05-28_f7451603a81ebae23f68347675e42bb8_cryptolocker
-
Size
75KB
-
Sample
240528-dgafeacc2y
-
MD5
f7451603a81ebae23f68347675e42bb8
-
SHA1
ed7c5c1e6f2ee65c6844254ca8a0cd141e1a7046
-
SHA256
b79f77d8152225835db01cd94a3b786dfe49b99ea2d66d6a20e4c6845430f43d
-
SHA512
01918d858127e6d82d0b291cb46459eb48cf32a38d7cc1f374cba74d32d71b8018f1ef860eb6d52534c56d6fac3c5e97c95326f74d67137ba2739725609ff952
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsE:X6a+SOtEvwDpjBZYvQd2b
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_f7451603a81ebae23f68347675e42bb8_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-28_f7451603a81ebae23f68347675e42bb8_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-28_f7451603a81ebae23f68347675e42bb8_cryptolocker
-
Size
75KB
-
MD5
f7451603a81ebae23f68347675e42bb8
-
SHA1
ed7c5c1e6f2ee65c6844254ca8a0cd141e1a7046
-
SHA256
b79f77d8152225835db01cd94a3b786dfe49b99ea2d66d6a20e4c6845430f43d
-
SHA512
01918d858127e6d82d0b291cb46459eb48cf32a38d7cc1f374cba74d32d71b8018f1ef860eb6d52534c56d6fac3c5e97c95326f74d67137ba2739725609ff952
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsE:X6a+SOtEvwDpjBZYvQd2b
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-