General
- Target 2024-06-11_0baf492ae393e1b39a65d1123ca6932c_cryptolocker
- Size 62KB
- Sample240611-dx6hsasdkf
- SHA256 4ae1bf9cd39bf5a99b5dad13f8caf8dd2de4559f014bd5cdc032e57da5fa944e
- MD5 0baf492ae393e1b39a65d1123ca6932c
- SHA1 887f86d42dd24ef9cd5cdffe39a0b267eb367b7b
- SHA512 ae0d0ff83a2657c902fd77575c52756c9f33c92383f540baf63c74d20e2db20876f9bad50037b308f26b8d49e3ca7d2b98efa07b8b780400b0a5a5bf4ee32fda
- SSDEEP 768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9u:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWws
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-11_0baf492ae393e1b39a65d1123ca6932c_cryptolocker.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-11_0baf492ae393e1b39a65d1123ca6932c_cryptolocker.exe
Resource
win10v2004-20240508-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-11_0baf492ae393e1b39a65d1123ca6932c_cryptolocker
- Size 62KB
- SHA256 4ae1bf9cd39bf5a99b5dad13f8caf8dd2de4559f014bd5cdc032e57da5fa944e
- MD5 0baf492ae393e1b39a65d1123ca6932c
- SHA1 887f86d42dd24ef9cd5cdffe39a0b267eb367b7b
- SHA512 ae0d0ff83a2657c902fd77575c52756c9f33c92383f540baf63c74d20e2db20876f9bad50037b308f26b8d49e3ca7d2b98efa07b8b780400b0a5a5bf4ee32fda
- SSDEEP 768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9u:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWws
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL