General
-
Target
2024-06-01_fd133ca2be3d23cb0eafe64682007aa6_cryptolocker
-
Size
43KB
-
Sample
240601-enmjzshd5x
-
MD5
fd133ca2be3d23cb0eafe64682007aa6
-
SHA1
39735a2064529a0ed19a8430418ef7510454c4cb
-
SHA256
dccb07c155579c24ccb505a00e566295022b29cb343bd58b9acb18a62f5c2806
-
SHA512
411d7497c35697cef036494c4fe4c6658ff736df532c26be25cb64914b05eaf7f20e93b8cd1457a3569385f3035d1516eef4aa68670528057901a1aeaf6f9ba6
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0t:6j+1NMOtEvwDpjrR2XabMq
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_fd133ca2be3d23cb0eafe64682007aa6_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-01_fd133ca2be3d23cb0eafe64682007aa6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-01_fd133ca2be3d23cb0eafe64682007aa6_cryptolocker
-
Size
43KB
-
MD5
fd133ca2be3d23cb0eafe64682007aa6
-
SHA1
39735a2064529a0ed19a8430418ef7510454c4cb
-
SHA256
dccb07c155579c24ccb505a00e566295022b29cb343bd58b9acb18a62f5c2806
-
SHA512
411d7497c35697cef036494c4fe4c6658ff736df532c26be25cb64914b05eaf7f20e93b8cd1457a3569385f3035d1516eef4aa68670528057901a1aeaf6f9ba6
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0t:6j+1NMOtEvwDpjrR2XabMq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-