General
-
Target
2024-06-12_fe63a9819b20d3f760f8ea7ad462fab7_cryptolocker
-
Size
76KB
-
Sample
240612-tlsqjs1dkf
-
MD5
fe63a9819b20d3f760f8ea7ad462fab7
-
SHA1
344400a792d4110c104a0f0c4601d2f91daf1812
-
SHA256
f128537f5de7f5961b2b81521d4ee970bed5c0ad400b11ebcf8c83adbb7cbea0
-
SHA512
4c030160a95805c97a2fd1c976eceffd0ff827e1eb3473f078808fd0c59fbe5e6e914d3e707eb1734b6412ed6ce1c805cf60a2921330028705269b46f7f3018b
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkx:X6a+SOtEvwDpjBZYvQd2q
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-12_fe63a9819b20d3f760f8ea7ad462fab7_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-12_fe63a9819b20d3f760f8ea7ad462fab7_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-12_fe63a9819b20d3f760f8ea7ad462fab7_cryptolocker
-
Size
76KB
-
MD5
fe63a9819b20d3f760f8ea7ad462fab7
-
SHA1
344400a792d4110c104a0f0c4601d2f91daf1812
-
SHA256
f128537f5de7f5961b2b81521d4ee970bed5c0ad400b11ebcf8c83adbb7cbea0
-
SHA512
4c030160a95805c97a2fd1c976eceffd0ff827e1eb3473f078808fd0c59fbe5e6e914d3e707eb1734b6412ed6ce1c805cf60a2921330028705269b46f7f3018b
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkx:X6a+SOtEvwDpjBZYvQd2q
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-