General
-
Target
2024-06-06_e0e8e5fde6baab112b4345cf030bb877_cryptolocker
-
Size
34KB
-
Sample
240606-gkh4haah37
-
MD5
e0e8e5fde6baab112b4345cf030bb877
-
SHA1
76311e1e928c0bae54d9a6841ae2109298ee1271
-
SHA256
c4f3e726e8d4d93194f547472de2baee97f1dcc8916fb0c41c528f1c51238091
-
SHA512
e020315d821a8a613b52677606d1674330246899e8f157979c39c2d81df1c8073ca21867f561240f51eeb680f7f2ad63ba305d5acce4845caa266579b41ce349
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp7h:bxNrC7kYo1Fxf2rY1V
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_e0e8e5fde6baab112b4345cf030bb877_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-06_e0e8e5fde6baab112b4345cf030bb877_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-06_e0e8e5fde6baab112b4345cf030bb877_cryptolocker
-
Size
34KB
-
MD5
e0e8e5fde6baab112b4345cf030bb877
-
SHA1
76311e1e928c0bae54d9a6841ae2109298ee1271
-
SHA256
c4f3e726e8d4d93194f547472de2baee97f1dcc8916fb0c41c528f1c51238091
-
SHA512
e020315d821a8a613b52677606d1674330246899e8f157979c39c2d81df1c8073ca21867f561240f51eeb680f7f2ad63ba305d5acce4845caa266579b41ce349
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp7h:bxNrC7kYo1Fxf2rY1V
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-