General
-
Target
2024-04-22_5f5cdd328c5ea70f138151467bc33bf0_cryptolocker
-
Size
36KB
-
Sample
240422-fgd5psfg56
-
MD5
5f5cdd328c5ea70f138151467bc33bf0
-
SHA1
d1215c9bd15743868aad46beaa070bcef1748f14
-
SHA256
46ad58cee9214ace75690bc53021c0990b6aed14f20d11c8b5846647009d35dd
-
SHA512
7350ff067ba165447aec27aa20fec576ca5ea6d5668f3aa1865c2895a067bbe4628c32255625bb7e871169d4ff7489394a38acaf769fd2203d157e4f3b5d9d85
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY261:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o361
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_5f5cdd328c5ea70f138151467bc33bf0_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-22_5f5cdd328c5ea70f138151467bc33bf0_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-22_5f5cdd328c5ea70f138151467bc33bf0_cryptolocker
-
Size
36KB
-
MD5
5f5cdd328c5ea70f138151467bc33bf0
-
SHA1
d1215c9bd15743868aad46beaa070bcef1748f14
-
SHA256
46ad58cee9214ace75690bc53021c0990b6aed14f20d11c8b5846647009d35dd
-
SHA512
7350ff067ba165447aec27aa20fec576ca5ea6d5668f3aa1865c2895a067bbe4628c32255625bb7e871169d4ff7489394a38acaf769fd2203d157e4f3b5d9d85
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY261:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o361
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-