General
-
Target
2024-06-02_d5a1b1fa179f9824bec0fb0ccfc37e68_cryptolocker
-
Size
49KB
-
Sample
240602-fd4aesbe4s
-
MD5
d5a1b1fa179f9824bec0fb0ccfc37e68
-
SHA1
86b07a9763e83744c1280486d40ee29e8adb2074
-
SHA256
0847b212ae8d19991500fbb9b3fd9fdc8adf2c9d8d93b39f639ba2f7b1100178
-
SHA512
bea1871120972edb327fa36c3090f541544c1785178d7f6eb8d05da1a7fdc2fc3bc550f75517627493542900198dc14eded202bbb61d2c7bd1e863e73f4097d2
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcq:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfq
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_d5a1b1fa179f9824bec0fb0ccfc37e68_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-02_d5a1b1fa179f9824bec0fb0ccfc37e68_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-02_d5a1b1fa179f9824bec0fb0ccfc37e68_cryptolocker
-
Size
49KB
-
MD5
d5a1b1fa179f9824bec0fb0ccfc37e68
-
SHA1
86b07a9763e83744c1280486d40ee29e8adb2074
-
SHA256
0847b212ae8d19991500fbb9b3fd9fdc8adf2c9d8d93b39f639ba2f7b1100178
-
SHA512
bea1871120972edb327fa36c3090f541544c1785178d7f6eb8d05da1a7fdc2fc3bc550f75517627493542900198dc14eded202bbb61d2c7bd1e863e73f4097d2
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcq:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-