General
-
Target
2024-06-01_8e6bb288025297b7d13be45fcd073efc_cryptolocker
-
Size
52KB
-
Sample
240601-yx5ayadf6z
-
MD5
8e6bb288025297b7d13be45fcd073efc
-
SHA1
3f7d3f4ea8f1a6e1c5b2818d975b7009ce4acf51
-
SHA256
1e5019f300533a2ae9d34d1f5d07b375b7002d248a7c05a0b4be4148450ebe30
-
SHA512
41f2627c072ca95e377503a0e8386e4c82a7090fdf00f0f07e7b51ba45870e2db236f859b1a794c9a2826fd8bbd759bba4760ba403e83fa6ba2e4bd26b6d03a9
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGf/l:79mqyNhQMOtEvwDpjBxe8GGf/l
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_8e6bb288025297b7d13be45fcd073efc_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-01_8e6bb288025297b7d13be45fcd073efc_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-01_8e6bb288025297b7d13be45fcd073efc_cryptolocker
-
Size
52KB
-
MD5
8e6bb288025297b7d13be45fcd073efc
-
SHA1
3f7d3f4ea8f1a6e1c5b2818d975b7009ce4acf51
-
SHA256
1e5019f300533a2ae9d34d1f5d07b375b7002d248a7c05a0b4be4148450ebe30
-
SHA512
41f2627c072ca95e377503a0e8386e4c82a7090fdf00f0f07e7b51ba45870e2db236f859b1a794c9a2826fd8bbd759bba4760ba403e83fa6ba2e4bd26b6d03a9
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGf/l:79mqyNhQMOtEvwDpjBxe8GGf/l
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-