General
-
Target
2024-06-02_d9736f9d67856f094f6227a6d4955e3d_cryptolocker
-
Size
43KB
-
Sample
240602-ffygysbf2s
-
MD5
d9736f9d67856f094f6227a6d4955e3d
-
SHA1
ebbfbe06066c29a09c832b32d88f38b6d58982c0
-
SHA256
b9e03f96eefde5b07baf3cda971ea65bc6010ffdf36e1c2e6186ef2189f229d1
-
SHA512
b4eee5611b5774420f6a4353c85650d5e6b57bb49840548a97fe55ccd457adaa7d3e2063aab69fc821abfa99a23449db1bb494cd2730b7945c2897df797dbd3a
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUkS:bm74zYcgT/EkM0ryfjdS
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_d9736f9d67856f094f6227a6d4955e3d_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-02_d9736f9d67856f094f6227a6d4955e3d_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_d9736f9d67856f094f6227a6d4955e3d_cryptolocker
-
Size
43KB
-
MD5
d9736f9d67856f094f6227a6d4955e3d
-
SHA1
ebbfbe06066c29a09c832b32d88f38b6d58982c0
-
SHA256
b9e03f96eefde5b07baf3cda971ea65bc6010ffdf36e1c2e6186ef2189f229d1
-
SHA512
b4eee5611b5774420f6a4353c85650d5e6b57bb49840548a97fe55ccd457adaa7d3e2063aab69fc821abfa99a23449db1bb494cd2730b7945c2897df797dbd3a
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUkS:bm74zYcgT/EkM0ryfjdS
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-