General
-
Target
2024-05-31_7e5db3547ea82d8f8ab402b7aec69ffc_cryptolocker
-
Size
48KB
-
Sample
240531-2l1p6agh84
-
MD5
7e5db3547ea82d8f8ab402b7aec69ffc
-
SHA1
264e5be79b7886bccecf244e7f6d14cfbcbbd5e8
-
SHA256
d56ebfef96ce0d2e0329a70f6b6c29a307bb5f1298f0bc06d4fb3295cc1ea4f5
-
SHA512
d918b3fd7bb494035f35e4e985e860a8dfe814d00e11c9a9ee325f1d1733629ee34f321b873f0f0beb8265a5e66360e2782261f3a6ed4146f1b018eec3ff87fd
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Sp8LT:79mqyNhQMOtEvwDpjBzckqSuv
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_7e5db3547ea82d8f8ab402b7aec69ffc_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-31_7e5db3547ea82d8f8ab402b7aec69ffc_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-31_7e5db3547ea82d8f8ab402b7aec69ffc_cryptolocker
-
Size
48KB
-
MD5
7e5db3547ea82d8f8ab402b7aec69ffc
-
SHA1
264e5be79b7886bccecf244e7f6d14cfbcbbd5e8
-
SHA256
d56ebfef96ce0d2e0329a70f6b6c29a307bb5f1298f0bc06d4fb3295cc1ea4f5
-
SHA512
d918b3fd7bb494035f35e4e985e860a8dfe814d00e11c9a9ee325f1d1733629ee34f321b873f0f0beb8265a5e66360e2782261f3a6ed4146f1b018eec3ff87fd
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Sp8LT:79mqyNhQMOtEvwDpjBzckqSuv
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-