General
-
Target
2024-05-28_601b0b35661150f15909076612da8df6_cryptolocker
-
Size
33KB
-
Sample
240528-x1nxpahh27
-
MD5
601b0b35661150f15909076612da8df6
-
SHA1
48c0468a20fa070de5c78135d5102bbf0425a271
-
SHA256
32a8e62020b5ba73089747b1cf4ee73295a7dc39d08ccf08864d32aea4649d2a
-
SHA512
265121427ecea626b62c91d586ac70d56b683671a72add71e6bff3807e2c6588f4697a334cfb34e1dd83fdf808fc8a2033eb7bb5b23c702b1969b37518dca1ea
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmG:bxNrC7kYo1Fxf2rYPP
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_601b0b35661150f15909076612da8df6_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-28_601b0b35661150f15909076612da8df6_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-28_601b0b35661150f15909076612da8df6_cryptolocker
-
Size
33KB
-
MD5
601b0b35661150f15909076612da8df6
-
SHA1
48c0468a20fa070de5c78135d5102bbf0425a271
-
SHA256
32a8e62020b5ba73089747b1cf4ee73295a7dc39d08ccf08864d32aea4649d2a
-
SHA512
265121427ecea626b62c91d586ac70d56b683671a72add71e6bff3807e2c6588f4697a334cfb34e1dd83fdf808fc8a2033eb7bb5b23c702b1969b37518dca1ea
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmG:bxNrC7kYo1Fxf2rYPP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-