General
- Target 2024-06-01_5406d257249f78433d5d4aed5d9da2ec_cryptolocker
- Size 36KB
- Sample240601-xtcabaca8s
- SHA256 cb5be874fed549dce066542212052d7cff7f960c48012760feab16342e576738
- MD5 5406d257249f78433d5d4aed5d9da2ec
- SHA1 f9bb210e56fa929b92d61e5811e0954ad91760c9
- SHA512 bd7ea05cd955f9c64e15f16022a0c2acefdb91dc3857dd3559e7a561e58c9290ab4e0f6362ec8008d4107932dcb10f4117a535ea1fbc397bff25858ddb63d221
- SSDEEP 384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNB:bAvJCYOOvbRPDEgXRc+BAILYB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2024-06-01_5406d257249f78433d5d4aed5d9da2ec_cryptolocker.exe
Resource
win7-20240220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-01_5406d257249f78433d5d4aed5d9da2ec_cryptolocker.exe
Resource
win10v2004-20240508-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-01_5406d257249f78433d5d4aed5d9da2ec_cryptolocker
- Size 36KB
- SHA256 cb5be874fed549dce066542212052d7cff7f960c48012760feab16342e576738
- MD5 5406d257249f78433d5d4aed5d9da2ec
- SHA1 f9bb210e56fa929b92d61e5811e0954ad91760c9
- SHA512 bd7ea05cd955f9c64e15f16022a0c2acefdb91dc3857dd3559e7a561e58c9290ab4e0f6362ec8008d4107932dcb10f4117a535ea1fbc397bff25858ddb63d221
- SSDEEP 384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNB:bAvJCYOOvbRPDEgXRc+BAILYB
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL