General
-
Target
2024-06-14_1248cc93d1d816f0eef081387b66fbab_cryptolocker
-
Size
48KB
-
Sample
240614-ja4nkatfjr
-
MD5
1248cc93d1d816f0eef081387b66fbab
-
SHA1
8452dbad8e4037f35326348753840155fd4ac9b5
-
SHA256
35b7d39e26419a0b274a70df1d0c72a59e1c254b38cf07f396ff018d7cb8a3ef
-
SHA512
24a35dcc77f45e941b5de91bddbfc691669255e132ee05b1add99ae53c27872699ab2bf5be0d5bc12e7149f0916dbf491abbcc98fa1ec1b66a61bec9028d54d7
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3SpU1:79mqyNhQMOtEvwDpjBzckqSw
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_1248cc93d1d816f0eef081387b66fbab_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-14_1248cc93d1d816f0eef081387b66fbab_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-14_1248cc93d1d816f0eef081387b66fbab_cryptolocker
-
Size
48KB
-
MD5
1248cc93d1d816f0eef081387b66fbab
-
SHA1
8452dbad8e4037f35326348753840155fd4ac9b5
-
SHA256
35b7d39e26419a0b274a70df1d0c72a59e1c254b38cf07f396ff018d7cb8a3ef
-
SHA512
24a35dcc77f45e941b5de91bddbfc691669255e132ee05b1add99ae53c27872699ab2bf5be0d5bc12e7149f0916dbf491abbcc98fa1ec1b66a61bec9028d54d7
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3SpU1:79mqyNhQMOtEvwDpjBzckqSw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-