General
-
Target
2024-06-12_9480548663dfa5657755886e4741fe8c_cryptolocker
-
Size
63KB
-
Sample
240612-3kexqsyflk
-
MD5
9480548663dfa5657755886e4741fe8c
-
SHA1
b388d1422df1ecda9e4e48a0b9469465b8e2c32b
-
SHA256
3cbd5fe5e7166e03e86d30acbc321f183aee26136861c084b39ea46598d9ac63
-
SHA512
273ab30606a7b3d2f5ce40dab063c8b3a5a34f502b771ab93d4db62db498a714d2bb28ac08d208a14d7770f19dcfa45ea3ef0a562d3e50e118c0f59d0494bf95
-
SSDEEP
1536:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWTAf:3WHsIOtEvwDpjoHYG
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-12_9480548663dfa5657755886e4741fe8c_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-12_9480548663dfa5657755886e4741fe8c_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-12_9480548663dfa5657755886e4741fe8c_cryptolocker
-
Size
63KB
-
MD5
9480548663dfa5657755886e4741fe8c
-
SHA1
b388d1422df1ecda9e4e48a0b9469465b8e2c32b
-
SHA256
3cbd5fe5e7166e03e86d30acbc321f183aee26136861c084b39ea46598d9ac63
-
SHA512
273ab30606a7b3d2f5ce40dab063c8b3a5a34f502b771ab93d4db62db498a714d2bb28ac08d208a14d7770f19dcfa45ea3ef0a562d3e50e118c0f59d0494bf95
-
SSDEEP
1536:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWTAf:3WHsIOtEvwDpjoHYG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-