General
- Target 2024-06-13_ed7290b012828e2ce5c7a9238bc8fb51_cryptolocker
- Size 74KB
- Sample240613-efmvsaxblj
- SHA256 6aa9a29ede843f4a5fda9c5ce2cfed0281900b1ca5ecf818813f5c13626377e1
- MD5 ed7290b012828e2ce5c7a9238bc8fb51
- SHA1 8a19843691792f38bcf9861fe1e3cd5c2f1142b8
- SHA512 82673fbd75419a69be8e24eb1442715079abc2fbdc36672f53d7309a010707e8abbb1e071ac736dbbcefdab8d28dbca346fd8102b52b6465c7f34d4717576637
- SSDEEP 768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsMO:u6QFElP6n+gWMOtEvwDpjJGYQbZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-13_ed7290b012828e2ce5c7a9238bc8fb51_cryptolocker.exe
Resource
win7-20240611-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_ed7290b012828e2ce5c7a9238bc8fb51_cryptolocker.exe
Resource
win10v2004-20240508-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-13_ed7290b012828e2ce5c7a9238bc8fb51_cryptolocker
- Size 74KB
- SHA256 6aa9a29ede843f4a5fda9c5ce2cfed0281900b1ca5ecf818813f5c13626377e1
- MD5 ed7290b012828e2ce5c7a9238bc8fb51
- SHA1 8a19843691792f38bcf9861fe1e3cd5c2f1142b8
- SHA512 82673fbd75419a69be8e24eb1442715079abc2fbdc36672f53d7309a010707e8abbb1e071ac736dbbcefdab8d28dbca346fd8102b52b6465c7f34d4717576637
- SSDEEP 768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsMO:u6QFElP6n+gWMOtEvwDpjJGYQbZ
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL