General
-
Target
2024-06-20_6e147a39937d40be0f14bda33900555f_cryptolocker
-
Size
42KB
-
Sample
240620-nkeveayglq
-
MD5
6e147a39937d40be0f14bda33900555f
-
SHA1
2eb7ec0a3e2ffffb8dc8ae6b896ce3bd24c18b28
-
SHA256
b15f05343241c4e932f4b9166f819ec2a0f39d8cd77eedaff7613dcb53766d33
-
SHA512
1004c5163d0eb6c8cd5fda45a46851d0f1a7737438a72799654434fc5e367b0bd8666857cf91c062ce706f2af163043f433a8f492793fa9e6832996e25ef8bf2
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCK:bA6YcA/X6G0W143QJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_6e147a39937d40be0f14bda33900555f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-20_6e147a39937d40be0f14bda33900555f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-20_6e147a39937d40be0f14bda33900555f_cryptolocker
-
Size
42KB
-
MD5
6e147a39937d40be0f14bda33900555f
-
SHA1
2eb7ec0a3e2ffffb8dc8ae6b896ce3bd24c18b28
-
SHA256
b15f05343241c4e932f4b9166f819ec2a0f39d8cd77eedaff7613dcb53766d33
-
SHA512
1004c5163d0eb6c8cd5fda45a46851d0f1a7737438a72799654434fc5e367b0bd8666857cf91c062ce706f2af163043f433a8f492793fa9e6832996e25ef8bf2
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwnCK:bA6YcA/X6G0W143QJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-