General
- Target 2024-05-30_5622f7e00a1dd417d57931c75ec6a8b4_cryptolocker
- Size 46KB
- Sample240530-ect5padd3t
- SHA256 b705c4fd700883735121793c1abbc10e6528d5c39333c139807e3b7262671160
- MD5 5622f7e00a1dd417d57931c75ec6a8b4
- SHA1 e9e01239eddfdee25c97f1c8ee7d3de5b8004248
- SHA512 4dd93cb3b79dc3f39d095a71df8dfc409ac90df737b51dea2b79e0e2ef4f13e8e4de532ca6b2704748b8a1a5e45020657640089d0fa7b36fe1b97430814fa015
- SSDEEP 768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJmM:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3BM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-05-30_5622f7e00a1dd417d57931c75ec6a8b4_cryptolocker.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-30_5622f7e00a1dd417d57931c75ec6a8b4_cryptolocker.exe
Resource
win10v2004-20240226-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-05-30_5622f7e00a1dd417d57931c75ec6a8b4_cryptolocker
- Size 46KB
- SHA256 b705c4fd700883735121793c1abbc10e6528d5c39333c139807e3b7262671160
- MD5 5622f7e00a1dd417d57931c75ec6a8b4
- SHA1 e9e01239eddfdee25c97f1c8ee7d3de5b8004248
- SHA512 4dd93cb3b79dc3f39d095a71df8dfc409ac90df737b51dea2b79e0e2ef4f13e8e4de532ca6b2704748b8a1a5e45020657640089d0fa7b36fe1b97430814fa015
- SSDEEP 768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJmM:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3BM
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL