General
-
Target
2024-05-29_def493811af6a8e009fdff5ae7b2bdad_cryptolocker
-
Size
87KB
-
Sample
240529-zf2ddsaa42
-
MD5
def493811af6a8e009fdff5ae7b2bdad
-
SHA1
8d7ab08519ccf3332898653af4c5147f2a9ff0d8
-
SHA256
c905576509ae01d874a0d2db6fdc6aacfc0b5e551fa1c7653540013b99218b69
-
SHA512
36684b5910100ba67e9c9997a958099939c0c61a662b93676377f249796f989784a7dd3b793fe594517f895b4ebe6a22bceeecd5ba4e05e41a8706bb55fa94ec
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6aF:V6a+pOtEvwDpjvph
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_def493811af6a8e009fdff5ae7b2bdad_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-29_def493811af6a8e009fdff5ae7b2bdad_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-29_def493811af6a8e009fdff5ae7b2bdad_cryptolocker
-
Size
87KB
-
MD5
def493811af6a8e009fdff5ae7b2bdad
-
SHA1
8d7ab08519ccf3332898653af4c5147f2a9ff0d8
-
SHA256
c905576509ae01d874a0d2db6fdc6aacfc0b5e551fa1c7653540013b99218b69
-
SHA512
36684b5910100ba67e9c9997a958099939c0c61a662b93676377f249796f989784a7dd3b793fe594517f895b4ebe6a22bceeecd5ba4e05e41a8706bb55fa94ec
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6aF:V6a+pOtEvwDpjvph
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-