General
-
Target
2024-05-28_611e5330e017d69aa140d899794ba906_cryptolocker
-
Size
41KB
-
Sample
240528-f59lhshb37
-
MD5
611e5330e017d69aa140d899794ba906
-
SHA1
629ea0f21f7e601cd164954929e4807c2d172276
-
SHA256
0c89897bca1f51ac1abd195ade3ba7877e082bf3f384035c4c30f54c55ec126a
-
SHA512
11d75161baa9c37460b6cbfc3359b6002756aa82889256261a11e4ae040c88f0ddd58e1f617818657ac854a929c270ad2dcccbcd744849c2521b042457fd1b66
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCS:bA6YcA/X6G0W143QB
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_611e5330e017d69aa140d899794ba906_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-28_611e5330e017d69aa140d899794ba906_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-28_611e5330e017d69aa140d899794ba906_cryptolocker
-
Size
41KB
-
MD5
611e5330e017d69aa140d899794ba906
-
SHA1
629ea0f21f7e601cd164954929e4807c2d172276
-
SHA256
0c89897bca1f51ac1abd195ade3ba7877e082bf3f384035c4c30f54c55ec126a
-
SHA512
11d75161baa9c37460b6cbfc3359b6002756aa82889256261a11e4ae040c88f0ddd58e1f617818657ac854a929c270ad2dcccbcd744849c2521b042457fd1b66
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCS:bA6YcA/X6G0W143QB
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-