General
-
Target
2024-06-03_9747fd7fba8f9d1bd8d20cdb11646d31_cryptolocker
-
Size
33KB
-
Sample
240603-kepwmshb5z
-
MD5
9747fd7fba8f9d1bd8d20cdb11646d31
-
SHA1
7e08be0ebab84fdb61285e75beda79d4e04c147f
-
SHA256
00760dad1078a9af480d8e60062705eb4ceed1315fe147d8fa1796504f2ce577
-
SHA512
b4870527b1da68dba16c335c1ef0b0767cab0f287b5ac96bb60e353da684c79b57a4e2892ca2c9bb62cd6bcd85f165dec311cd0b1548622c5f864d6c740f2f28
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvxLy:bG74zYcgT/Ekd0ryfjkty
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_9747fd7fba8f9d1bd8d20cdb11646d31_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-03_9747fd7fba8f9d1bd8d20cdb11646d31_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-03_9747fd7fba8f9d1bd8d20cdb11646d31_cryptolocker
-
Size
33KB
-
MD5
9747fd7fba8f9d1bd8d20cdb11646d31
-
SHA1
7e08be0ebab84fdb61285e75beda79d4e04c147f
-
SHA256
00760dad1078a9af480d8e60062705eb4ceed1315fe147d8fa1796504f2ce577
-
SHA512
b4870527b1da68dba16c335c1ef0b0767cab0f287b5ac96bb60e353da684c79b57a4e2892ca2c9bb62cd6bcd85f165dec311cd0b1548622c5f864d6c740f2f28
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvxLy:bG74zYcgT/Ekd0ryfjkty
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-