General
- Target 2024-06-02_05d75f3393eb38a25e23c3da8d7d2999_cryptolocker
- Size 35KB
- Sample240602-2z33fabd57
- SHA256 d789c8fbbf5341c38f09e357ab28140265e89cfd774ea802eb81ad91eae929bd
- MD5 05d75f3393eb38a25e23c3da8d7d2999
- SHA1 e25318d9decffad3b95302f6215280821f9a1a63
- SHA512 4accb71d7323b544eff2e038ffceca1950fa83c55041d0b3fb4bd52a8495d2e660ad4d9923b015044e2dd4f15c4c35db8e8cc7597b9d39c072c8230d5dacd335
- SSDEEP 768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp7lBn:bxNrC7kYo1Fxf2rY1BBn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2024-06-02_05d75f3393eb38a25e23c3da8d7d2999_cryptolocker.exe
Resource
win7-20240419-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-02_05d75f3393eb38a25e23c3da8d7d2999_cryptolocker.exe
Resource
win10v2004-20240508-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-02_05d75f3393eb38a25e23c3da8d7d2999_cryptolocker
- Size 35KB
- SHA256 d789c8fbbf5341c38f09e357ab28140265e89cfd774ea802eb81ad91eae929bd
- MD5 05d75f3393eb38a25e23c3da8d7d2999
- SHA1 e25318d9decffad3b95302f6215280821f9a1a63
- SHA512 4accb71d7323b544eff2e038ffceca1950fa83c55041d0b3fb4bd52a8495d2e660ad4d9923b015044e2dd4f15c4c35db8e8cc7597b9d39c072c8230d5dacd335
- SSDEEP 768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp7lBn:bxNrC7kYo1Fxf2rY1BBn
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL