General
-
Target
2024-05-29_614fdbd72bd513c7054b20678409dbc6_cryptolocker
-
Size
81KB
-
Sample
240529-kct3kshc72
-
MD5
614fdbd72bd513c7054b20678409dbc6
-
SHA1
2838b283cf1feae7109f2bbf0c9fb3f9361c4c2f
-
SHA256
4efa4fccf0ecc972685400099f3fee679ba44009ab8dbcda8ef4b62af356f760
-
SHA512
a63657c80dc88bd90e5c5f8cbdc3046588aee116cf708a2b8c588f0d2e1246a03adbc5c46dd24e924535d8a59af8530a5feb2eb1ad4ec8b022d939e73c9a7ab5
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqY:vCjsIOtEvwDpj5H9YvQd2x
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_614fdbd72bd513c7054b20678409dbc6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-29_614fdbd72bd513c7054b20678409dbc6_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-29_614fdbd72bd513c7054b20678409dbc6_cryptolocker
-
Size
81KB
-
MD5
614fdbd72bd513c7054b20678409dbc6
-
SHA1
2838b283cf1feae7109f2bbf0c9fb3f9361c4c2f
-
SHA256
4efa4fccf0ecc972685400099f3fee679ba44009ab8dbcda8ef4b62af356f760
-
SHA512
a63657c80dc88bd90e5c5f8cbdc3046588aee116cf708a2b8c588f0d2e1246a03adbc5c46dd24e924535d8a59af8530a5feb2eb1ad4ec8b022d939e73c9a7ab5
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqY:vCjsIOtEvwDpj5H9YvQd2x
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-