General
-
Target
2024-06-04_b7fd34f1bdf6b9669ff15b4449dad4ce_cryptolocker
-
Size
76KB
-
Sample
240604-wx25gafg72
-
MD5
b7fd34f1bdf6b9669ff15b4449dad4ce
-
SHA1
de14ae1fd879650a23e37ca460be9905ed6f3dee
-
SHA256
98b931fe3d2b0ba53192d10651bc8145d52b927f160966251f3930121348f6d9
-
SHA512
f395b3694a440cb169edaada8841d748b32062a96389ad16eebc3ac38f26a812a2921e09b5f4555ccfbc908bc3473bf03bd0e052b90cf75905cb54c86c881516
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sij:X6a+SOtEvwDpjBZYvQd25
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_b7fd34f1bdf6b9669ff15b4449dad4ce_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-04_b7fd34f1bdf6b9669ff15b4449dad4ce_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-04_b7fd34f1bdf6b9669ff15b4449dad4ce_cryptolocker
-
Size
76KB
-
MD5
b7fd34f1bdf6b9669ff15b4449dad4ce
-
SHA1
de14ae1fd879650a23e37ca460be9905ed6f3dee
-
SHA256
98b931fe3d2b0ba53192d10651bc8145d52b927f160966251f3930121348f6d9
-
SHA512
f395b3694a440cb169edaada8841d748b32062a96389ad16eebc3ac38f26a812a2921e09b5f4555ccfbc908bc3473bf03bd0e052b90cf75905cb54c86c881516
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sij:X6a+SOtEvwDpjBZYvQd25
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-