General
-
Target
2024-05-30_528048fad5056e3fefdd8502c1529134_cryptolocker
-
Size
39KB
-
Sample
240530-1wdspscb34
-
MD5
528048fad5056e3fefdd8502c1529134
-
SHA1
832800e6fe7e88169a31f4eeec1dd04f9e35db15
-
SHA256
7baa8d1ef11a6332af4d95e800106c6a5f9296427517e2469f52261eaa46cc16
-
SHA512
786b38ea1117e3fc8e5a1a42bcf67136468cee95e4747ba98915674891663206112262d130e668f3314a496bc25d813004985b78d5bf91f1f27d498926f0b62b
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4H9:fT+hsMQMOtEvwDpjoIHd
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_528048fad5056e3fefdd8502c1529134_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-30_528048fad5056e3fefdd8502c1529134_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-30_528048fad5056e3fefdd8502c1529134_cryptolocker
-
Size
39KB
-
MD5
528048fad5056e3fefdd8502c1529134
-
SHA1
832800e6fe7e88169a31f4eeec1dd04f9e35db15
-
SHA256
7baa8d1ef11a6332af4d95e800106c6a5f9296427517e2469f52261eaa46cc16
-
SHA512
786b38ea1117e3fc8e5a1a42bcf67136468cee95e4747ba98915674891663206112262d130e668f3314a496bc25d813004985b78d5bf91f1f27d498926f0b62b
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4H9:fT+hsMQMOtEvwDpjoIHd
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-