General
-
Target
2024-06-03_91cc1d871bac9ec5eb416a1ba2cb242f_cryptolocker
-
Size
50KB
-
Sample
240603-edc8kaab9v
-
MD5
91cc1d871bac9ec5eb416a1ba2cb242f
-
SHA1
8b86f1a066657f49d85a64dce8d36d4e7db698d8
-
SHA256
e7620386762b4e7f8a94144027e1830ef8c7b9024aae6e767c9b44bf4f5ab79f
-
SHA512
3f141bdaf0400d4dc5f5cee864141803af5435112a5b07bd6ebe6fce8149e727a37e2d04d74910fc496623e231e8d4be4e15122f9ea1e363bac6996d442e7ab5
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfn:X6QFElP6n+gJBMOtEvwDpjBtEdXfn
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_91cc1d871bac9ec5eb416a1ba2cb242f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-03_91cc1d871bac9ec5eb416a1ba2cb242f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-03_91cc1d871bac9ec5eb416a1ba2cb242f_cryptolocker
-
Size
50KB
-
MD5
91cc1d871bac9ec5eb416a1ba2cb242f
-
SHA1
8b86f1a066657f49d85a64dce8d36d4e7db698d8
-
SHA256
e7620386762b4e7f8a94144027e1830ef8c7b9024aae6e767c9b44bf4f5ab79f
-
SHA512
3f141bdaf0400d4dc5f5cee864141803af5435112a5b07bd6ebe6fce8149e727a37e2d04d74910fc496623e231e8d4be4e15122f9ea1e363bac6996d442e7ab5
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfn:X6QFElP6n+gJBMOtEvwDpjBtEdXfn
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-