General
-
Target
2024-05-30_b32df06eb18d62c4db53860943c4506a_cryptolocker
-
Size
76KB
-
Sample
240530-277qlaee99
-
MD5
b32df06eb18d62c4db53860943c4506a
-
SHA1
69492f63916557f3c69f4c3a185fe878b2fe4652
-
SHA256
0b4d0cd82b5c4a4f22e38ffbca0c06af93dc55122888e043e871b4f5608a8864
-
SHA512
50edf649c9601247d9c6b39cdca8dbf817e784a1be71c11a159d7d43a5fdfae2cd56b6251a19eb9b24b1125a0fc17870b689954464e58a675db6256cae3d9280
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMOSD:X6a+SOtEvwDpjBZYvQd2u
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_b32df06eb18d62c4db53860943c4506a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-30_b32df06eb18d62c4db53860943c4506a_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-30_b32df06eb18d62c4db53860943c4506a_cryptolocker
-
Size
76KB
-
MD5
b32df06eb18d62c4db53860943c4506a
-
SHA1
69492f63916557f3c69f4c3a185fe878b2fe4652
-
SHA256
0b4d0cd82b5c4a4f22e38ffbca0c06af93dc55122888e043e871b4f5608a8864
-
SHA512
50edf649c9601247d9c6b39cdca8dbf817e784a1be71c11a159d7d43a5fdfae2cd56b6251a19eb9b24b1125a0fc17870b689954464e58a675db6256cae3d9280
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMOSD:X6a+SOtEvwDpjBZYvQd2u
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-