General
-
Target
2024-05-31_417693c8f3a2cb19c9c849ef353314ce_cryptolocker
-
Size
87KB
-
Sample
240531-f4s75sge3y
-
MD5
417693c8f3a2cb19c9c849ef353314ce
-
SHA1
e2bc2a0963232b589eb4ad3d40914210f52d88ae
-
SHA256
32e02b8499fffcd01d4aa2b70047af629ef922b138ba4a59a01d0112e528e4e2
-
SHA512
24b337e86ebb68e0f7cd29094364d56a20807d76665b5970fcfc4da9015380cf6c672cebc242225fecf889f0735502f2a563487c1bfb410d394de7480abc992b
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBlm:vCjsIOtEvwDpj5H9YvQd2o
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_417693c8f3a2cb19c9c849ef353314ce_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-31_417693c8f3a2cb19c9c849ef353314ce_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-31_417693c8f3a2cb19c9c849ef353314ce_cryptolocker
-
Size
87KB
-
MD5
417693c8f3a2cb19c9c849ef353314ce
-
SHA1
e2bc2a0963232b589eb4ad3d40914210f52d88ae
-
SHA256
32e02b8499fffcd01d4aa2b70047af629ef922b138ba4a59a01d0112e528e4e2
-
SHA512
24b337e86ebb68e0f7cd29094364d56a20807d76665b5970fcfc4da9015380cf6c672cebc242225fecf889f0735502f2a563487c1bfb410d394de7480abc992b
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBlm:vCjsIOtEvwDpj5H9YvQd2o
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-