General
-
Target
2024-06-11_e2728dd0c81d71955fd4aff6997c7042_cryptolocker
-
Size
45KB
-
Sample
240611-snd5ha1flb
-
MD5
e2728dd0c81d71955fd4aff6997c7042
-
SHA1
5390e88c778fbbb219d0196e9ccb10507d2151a9
-
SHA256
169a9750890b2e2ac3f197b6f8ed7a6e0075c4d32134f22a0f19446e77548ded
-
SHA512
a9ded1f6723aab9a3db6b1794cb5d2a901dc5c2cca54868ba6fd0198a4a2b20632560237534cf7a5d74947b84f1698406b64b51c58ff6c4508d31e6d67ce494b
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8k:bm74zYcgT/EkM0ryfjPdQZk
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_e2728dd0c81d71955fd4aff6997c7042_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-11_e2728dd0c81d71955fd4aff6997c7042_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-11_e2728dd0c81d71955fd4aff6997c7042_cryptolocker
-
Size
45KB
-
MD5
e2728dd0c81d71955fd4aff6997c7042
-
SHA1
5390e88c778fbbb219d0196e9ccb10507d2151a9
-
SHA256
169a9750890b2e2ac3f197b6f8ed7a6e0075c4d32134f22a0f19446e77548ded
-
SHA512
a9ded1f6723aab9a3db6b1794cb5d2a901dc5c2cca54868ba6fd0198a4a2b20632560237534cf7a5d74947b84f1698406b64b51c58ff6c4508d31e6d67ce494b
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8k:bm74zYcgT/EkM0ryfjPdQZk
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-