General
-
Target
2024-06-07_51ff5924d4d4f280b7c84f9271c0282b_cryptolocker
-
Size
43KB
-
Sample
240607-qzhkysaa53
-
MD5
51ff5924d4d4f280b7c84f9271c0282b
-
SHA1
517e8b91972447bca07c1531d115dac4ed4f0759
-
SHA256
75a195a9f17f5a094c4c0755a6b800c18fcb6d53bd23592b3d917fb3c5fb115a
-
SHA512
66640023721f70365be72bbfaf27dc192b60cf3511dc830eb6d31a6e007a4e80ad4a62589a4c37950b6c8b2bf6e14f71253cb5b369414acbba38fb454661008a
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUkrS:bm74zYcgT/EkM0ryfjdW
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-07_51ff5924d4d4f280b7c84f9271c0282b_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-07_51ff5924d4d4f280b7c84f9271c0282b_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-07_51ff5924d4d4f280b7c84f9271c0282b_cryptolocker
-
Size
43KB
-
MD5
51ff5924d4d4f280b7c84f9271c0282b
-
SHA1
517e8b91972447bca07c1531d115dac4ed4f0759
-
SHA256
75a195a9f17f5a094c4c0755a6b800c18fcb6d53bd23592b3d917fb3c5fb115a
-
SHA512
66640023721f70365be72bbfaf27dc192b60cf3511dc830eb6d31a6e007a4e80ad4a62589a4c37950b6c8b2bf6e14f71253cb5b369414acbba38fb454661008a
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUkrS:bm74zYcgT/EkM0ryfjdW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-