General
-
Target
2024-06-11_efbb210ccd97d1655eee3fe50d6c94e1_cryptolocker
-
Size
64KB
-
Sample
240611-dhe3aa1hle
-
MD5
efbb210ccd97d1655eee3fe50d6c94e1
-
SHA1
469b8d7cb3ef38f34360095db8e72c6d388714eb
-
SHA256
f635135532a117b99f106612ca539500052a87401b8ed13698ed575bc1a21633
-
SHA512
82cca60a0ad8a70b00b7f62bff44135ba49a9d1bbb0d44315ff26b941e3a87960f35c37391509857c32b14a3e75c65704a56c2fcf35bda1b73976305c239ef02
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wz:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7k
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_efbb210ccd97d1655eee3fe50d6c94e1_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-11_efbb210ccd97d1655eee3fe50d6c94e1_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-11_efbb210ccd97d1655eee3fe50d6c94e1_cryptolocker
-
Size
64KB
-
MD5
efbb210ccd97d1655eee3fe50d6c94e1
-
SHA1
469b8d7cb3ef38f34360095db8e72c6d388714eb
-
SHA256
f635135532a117b99f106612ca539500052a87401b8ed13698ed575bc1a21633
-
SHA512
82cca60a0ad8a70b00b7f62bff44135ba49a9d1bbb0d44315ff26b941e3a87960f35c37391509857c32b14a3e75c65704a56c2fcf35bda1b73976305c239ef02
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wz:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7k
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-