General
-
Target
2024-06-02_10343e6a06d28333fb05faa7c70c5fe7_cryptolocker
-
Size
47KB
-
Sample
240602-g5hcpseb84
-
MD5
10343e6a06d28333fb05faa7c70c5fe7
-
SHA1
03374bea38c647b74329338e4b25ce419ddc4e92
-
SHA256
6780139e96a2272a36678406918e330dcef203afaace35b30557d252635340a6
-
SHA512
ce17dc1c72352552f22b036a9819e2ac2995b0809a521d4d433adc34a2f633b14319c20429e87b42710c15d1bdf71dcc4c77551253477fcaac0083ecb9bcf541
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhL:xj+VGMOtEvwDpjy+TRhL
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_10343e6a06d28333fb05faa7c70c5fe7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-02_10343e6a06d28333fb05faa7c70c5fe7_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_10343e6a06d28333fb05faa7c70c5fe7_cryptolocker
-
Size
47KB
-
MD5
10343e6a06d28333fb05faa7c70c5fe7
-
SHA1
03374bea38c647b74329338e4b25ce419ddc4e92
-
SHA256
6780139e96a2272a36678406918e330dcef203afaace35b30557d252635340a6
-
SHA512
ce17dc1c72352552f22b036a9819e2ac2995b0809a521d4d433adc34a2f633b14319c20429e87b42710c15d1bdf71dcc4c77551253477fcaac0083ecb9bcf541
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhL:xj+VGMOtEvwDpjy+TRhL
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-