General
- Target 2024-05-30_9d4e70ae884832ba10e58b1a9be026cf_cryptolocker
- Size 46KB
- Sample240530-erblwsfa33
- SHA256 4edb5895ed19351fd80051c4e9b82edc13ef63db41c2755abc63e765cb285f11
- MD5 9d4e70ae884832ba10e58b1a9be026cf
- SHA1 51f87754257348417ba32a1358c23a844517cc90
- SHA512 25b298e1706e80c34a3b15a123c73e2b5f38765c09f60895feacb76f10e4753d96737417b673c080a6a3680622afca1261b3752bdf53429e58ac4de0a64be158
- SSDEEP 768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPQ:P6QFElP6k+MRQMOtEvwDpjBQpVXR
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-05-30_9d4e70ae884832ba10e58b1a9be026cf_cryptolocker.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-30_9d4e70ae884832ba10e58b1a9be026cf_cryptolocker.exe
Resource
win10v2004-20240426-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-05-30_9d4e70ae884832ba10e58b1a9be026cf_cryptolocker
- Size 46KB
- SHA256 4edb5895ed19351fd80051c4e9b82edc13ef63db41c2755abc63e765cb285f11
- MD5 9d4e70ae884832ba10e58b1a9be026cf
- SHA1 51f87754257348417ba32a1358c23a844517cc90
- SHA512 25b298e1706e80c34a3b15a123c73e2b5f38765c09f60895feacb76f10e4753d96737417b673c080a6a3680622afca1261b3752bdf53429e58ac4de0a64be158
- SSDEEP 768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPQ:P6QFElP6k+MRQMOtEvwDpjBQpVXR
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL