General
-
Target
2024-06-02_bdc8ea56fe31aab00e4186b266a3378d_cryptolocker
-
Size
43KB
-
Sample
240602-a7lpksde87
-
MD5
bdc8ea56fe31aab00e4186b266a3378d
-
SHA1
b76a0655f11b944bfb405f26da4d47834ef86a09
-
SHA256
6f2bee81bb95993b7eec58278c00e3233ebfe7d417cd0cc19ccd65ace5966236
-
SHA512
c05e63f00a4f330790df580725d563c76f44f28cfc914e31f9b0d8f0c53975e58f3f47ac14d28939b936de3e69be4b396b8be624bd545c83aaf5d340ed72d19a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA9:bCDOw9aMDooc+vA9
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_bdc8ea56fe31aab00e4186b266a3378d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-02_bdc8ea56fe31aab00e4186b266a3378d_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-02_bdc8ea56fe31aab00e4186b266a3378d_cryptolocker
-
Size
43KB
-
MD5
bdc8ea56fe31aab00e4186b266a3378d
-
SHA1
b76a0655f11b944bfb405f26da4d47834ef86a09
-
SHA256
6f2bee81bb95993b7eec58278c00e3233ebfe7d417cd0cc19ccd65ace5966236
-
SHA512
c05e63f00a4f330790df580725d563c76f44f28cfc914e31f9b0d8f0c53975e58f3f47ac14d28939b936de3e69be4b396b8be624bd545c83aaf5d340ed72d19a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA9:bCDOw9aMDooc+vA9
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-