General
-
Target
2024-06-03_ea05db1df87aa6d0ff89ee6b20502fda_cryptolocker
-
Size
63KB
-
Sample
240603-epd91aag5x
-
MD5
ea05db1df87aa6d0ff89ee6b20502fda
-
SHA1
2d8fb0039d06d63ff7829d87ebc32b4b06112ad0
-
SHA256
82211ba79d9e7018ef6f039da1c9d8f131fbf72948997cda7e0480d3e13ad49e
-
SHA512
a6908d2f2827c04e32100c700e7c1cf54757b13a4aec9681e93653b9420f2a9084607a04ba84c0b5a6e67f12e1ad9dda9432d8f1112b05a640fa8b9c658a4370
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnF7HH:btng54SMLr+/AO/kIhfoKMHdap
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_ea05db1df87aa6d0ff89ee6b20502fda_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-03_ea05db1df87aa6d0ff89ee6b20502fda_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-03_ea05db1df87aa6d0ff89ee6b20502fda_cryptolocker
-
Size
63KB
-
MD5
ea05db1df87aa6d0ff89ee6b20502fda
-
SHA1
2d8fb0039d06d63ff7829d87ebc32b4b06112ad0
-
SHA256
82211ba79d9e7018ef6f039da1c9d8f131fbf72948997cda7e0480d3e13ad49e
-
SHA512
a6908d2f2827c04e32100c700e7c1cf54757b13a4aec9681e93653b9420f2a9084607a04ba84c0b5a6e67f12e1ad9dda9432d8f1112b05a640fa8b9c658a4370
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnF7HH:btng54SMLr+/AO/kIhfoKMHdap
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-