General
-
Target
2024-06-02_6213bd24290b2d8ba81e518cad8510ac_cryptolocker
-
Size
38KB
-
Sample
240603-adlgqaca6z
-
MD5
6213bd24290b2d8ba81e518cad8510ac
-
SHA1
28074cc5ecf8a83bf1dcb38278b7c5898c35434d
-
SHA256
fdd7d7a03fd20a0cdf4430fc8d1abcdd50e18639742cd5846c957fb8b9479442
-
SHA512
7ddb24bb145a4c787a45269c2f232ba40f1288660079e9cc036e592437941383813319212fd0430443d19f35a6effbc5d84fa2ec1ed43daa45b1900ce4392d76
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDh8F:bAvJCF+RQgJeab4sbs
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_6213bd24290b2d8ba81e518cad8510ac_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-02_6213bd24290b2d8ba81e518cad8510ac_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_6213bd24290b2d8ba81e518cad8510ac_cryptolocker
-
Size
38KB
-
MD5
6213bd24290b2d8ba81e518cad8510ac
-
SHA1
28074cc5ecf8a83bf1dcb38278b7c5898c35434d
-
SHA256
fdd7d7a03fd20a0cdf4430fc8d1abcdd50e18639742cd5846c957fb8b9479442
-
SHA512
7ddb24bb145a4c787a45269c2f232ba40f1288660079e9cc036e592437941383813319212fd0430443d19f35a6effbc5d84fa2ec1ed43daa45b1900ce4392d76
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDh8F:bAvJCF+RQgJeab4sbs
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-