General
-
Target
2024-06-04_2af240e747678040301ab37a407eafc9_cryptolocker
-
Size
43KB
-
Sample
240604-wgdryafa88
-
MD5
2af240e747678040301ab37a407eafc9
-
SHA1
f424604d23361ca28b6e26325208b14b509d81e0
-
SHA256
72fa3b6f155081da8e150e3c3196be8374b4e794df0af22a6654dba7c67f1763
-
SHA512
f308dbf605f9d14643b909e4c46a4aa78acfa1a0794fab4128bf0e9693413356c5945e77d3458ba84dc966483f5d3c9cd815088deb5c76a0313e31af2406e1fe
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0I:6j+1NMOtEvwDpjrR2XabMD
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_2af240e747678040301ab37a407eafc9_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-04_2af240e747678040301ab37a407eafc9_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-04_2af240e747678040301ab37a407eafc9_cryptolocker
-
Size
43KB
-
MD5
2af240e747678040301ab37a407eafc9
-
SHA1
f424604d23361ca28b6e26325208b14b509d81e0
-
SHA256
72fa3b6f155081da8e150e3c3196be8374b4e794df0af22a6654dba7c67f1763
-
SHA512
f308dbf605f9d14643b909e4c46a4aa78acfa1a0794fab4128bf0e9693413356c5945e77d3458ba84dc966483f5d3c9cd815088deb5c76a0313e31af2406e1fe
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0I:6j+1NMOtEvwDpjrR2XabMD
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-