General
-
Target
2024-05-30_e8ec59520037109abf1f07390be15eb9_cryptolocker
-
Size
68KB
-
Sample
240530-hyavqabc83
-
MD5
e8ec59520037109abf1f07390be15eb9
-
SHA1
452b75a11d06445a4cce6e5548ed7471cf830b90
-
SHA256
1d92cde07f092dcf16608d058a4ffcfa9d2d36d009c33a3906d368b1e848e637
-
SHA512
2d4f89ebb0db376bca11de4bf89ae58e53ef4621a723951a0300a683f9068b417b8d989cb9461b79d64e27b14d3963a76a5a0e61e435e6b729bfad350b37015c
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGy7D:TCjsIOtEvwDpj5HE/OUHnSMYs
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_e8ec59520037109abf1f07390be15eb9_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-30_e8ec59520037109abf1f07390be15eb9_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-30_e8ec59520037109abf1f07390be15eb9_cryptolocker
-
Size
68KB
-
MD5
e8ec59520037109abf1f07390be15eb9
-
SHA1
452b75a11d06445a4cce6e5548ed7471cf830b90
-
SHA256
1d92cde07f092dcf16608d058a4ffcfa9d2d36d009c33a3906d368b1e848e637
-
SHA512
2d4f89ebb0db376bca11de4bf89ae58e53ef4621a723951a0300a683f9068b417b8d989cb9461b79d64e27b14d3963a76a5a0e61e435e6b729bfad350b37015c
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGy7D:TCjsIOtEvwDpj5HE/OUHnSMYs
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-