General
-
Target
2024-05-31_e8bea4aa5a89e89eaf6b806fe7302950_cryptolocker
-
Size
57KB
-
Sample
240531-cbk5aaca82
-
MD5
e8bea4aa5a89e89eaf6b806fe7302950
-
SHA1
f9b8ae10977bfaec8a1310fb66e45bad738e7eb2
-
SHA256
534406336fe9e1327903cfa65232242275a725f41c7c6f1e7af15b68456e100a
-
SHA512
9f5868732e79204264189491cd8f66bfb2747463111f1640e84c16f2f8248cb434ed1117929ff16da488251d2d1277381566e5f551466152126df9867194e724
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8pu8:bIDOw9a0DwitDZzcTL8
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_e8bea4aa5a89e89eaf6b806fe7302950_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-31_e8bea4aa5a89e89eaf6b806fe7302950_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-31_e8bea4aa5a89e89eaf6b806fe7302950_cryptolocker
-
Size
57KB
-
MD5
e8bea4aa5a89e89eaf6b806fe7302950
-
SHA1
f9b8ae10977bfaec8a1310fb66e45bad738e7eb2
-
SHA256
534406336fe9e1327903cfa65232242275a725f41c7c6f1e7af15b68456e100a
-
SHA512
9f5868732e79204264189491cd8f66bfb2747463111f1640e84c16f2f8248cb434ed1117929ff16da488251d2d1277381566e5f551466152126df9867194e724
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8pu8:bIDOw9a0DwitDZzcTL8
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-