General
-
Target
2024-06-02_54fa73d3ef79147deec7719e65bd6c68_cryptolocker
-
Size
78KB
-
Sample
240602-zpfhaaef5z
-
MD5
54fa73d3ef79147deec7719e65bd6c68
-
SHA1
8cf95034a020749d830008b67c70252fb996b971
-
SHA256
aa688d789f56f72a48dd11ed579d2f43646374b55d901f7e53a27d639083c96c
-
SHA512
0df4b8580fe37f6dab5b86699aeed5a76e596804989f5b64d13d640daa3c4c42671b1d7c922a5f6498ff882e4d3987213fde96b6de803e292988d9571bb8a188
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf1:vCjsIOtEvwDpj5H9YvQd2R
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_54fa73d3ef79147deec7719e65bd6c68_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-02_54fa73d3ef79147deec7719e65bd6c68_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_54fa73d3ef79147deec7719e65bd6c68_cryptolocker
-
Size
78KB
-
MD5
54fa73d3ef79147deec7719e65bd6c68
-
SHA1
8cf95034a020749d830008b67c70252fb996b971
-
SHA256
aa688d789f56f72a48dd11ed579d2f43646374b55d901f7e53a27d639083c96c
-
SHA512
0df4b8580fe37f6dab5b86699aeed5a76e596804989f5b64d13d640daa3c4c42671b1d7c922a5f6498ff882e4d3987213fde96b6de803e292988d9571bb8a188
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf1:vCjsIOtEvwDpj5H9YvQd2R
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-