General
-
Target
2024-05-28_7e94dbf8abdc21a1c2ec2bfc1deb09f0_cryptolocker
-
Size
47KB
-
Sample
240528-ear8bade6z
-
MD5
7e94dbf8abdc21a1c2ec2bfc1deb09f0
-
SHA1
1376089b48ba4dc6153985f871c781a56bf074b0
-
SHA256
12f28f6ac7525639e6006f82bffd3db56eee12b02bbfb377fa5623e85886cbcf
-
SHA512
54de6742cd105d08e16fb7e5ac8aba353b1699b2f01bca4485af9ca7779144e534a84f153ef1cc9bb9543770146114ac8066d25eb04c6800881a0723261dcf46
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2VM:79inqyNR/QtOOtEvwDpjBKccJVODvy3N
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_7e94dbf8abdc21a1c2ec2bfc1deb09f0_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-28_7e94dbf8abdc21a1c2ec2bfc1deb09f0_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-28_7e94dbf8abdc21a1c2ec2bfc1deb09f0_cryptolocker
-
Size
47KB
-
MD5
7e94dbf8abdc21a1c2ec2bfc1deb09f0
-
SHA1
1376089b48ba4dc6153985f871c781a56bf074b0
-
SHA256
12f28f6ac7525639e6006f82bffd3db56eee12b02bbfb377fa5623e85886cbcf
-
SHA512
54de6742cd105d08e16fb7e5ac8aba353b1699b2f01bca4485af9ca7779144e534a84f153ef1cc9bb9543770146114ac8066d25eb04c6800881a0723261dcf46
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2VM:79inqyNR/QtOOtEvwDpjBKccJVODvy3N
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-