General
-
Target
2024-04-22_51d5fe2d36cf4be614e726ccd9acd36a_cryptolocker
-
Size
54KB
-
Sample
240422-zbfwwsga3y
-
MD5
51d5fe2d36cf4be614e726ccd9acd36a
-
SHA1
1f42dae6d293ffddd8c4e621c9fd0d8bf20f8c62
-
SHA256
8be4d55186e8a106ffdae4b8ea99e06cd873106a8fd45e561cbc3c3e51c79146
-
SHA512
1980dd2f0791576cb8a4712d0148b6ae738e3b8f756edda9777510fcfcbfcb2c8cddabc9c458858ef44f9d325baec556bec4ce1cf128755cc4f3e2591a5af557
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puk:bIDOw9a0DwitDZzcTLk
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_51d5fe2d36cf4be614e726ccd9acd36a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_51d5fe2d36cf4be614e726ccd9acd36a_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-22_51d5fe2d36cf4be614e726ccd9acd36a_cryptolocker
-
Size
54KB
-
MD5
51d5fe2d36cf4be614e726ccd9acd36a
-
SHA1
1f42dae6d293ffddd8c4e621c9fd0d8bf20f8c62
-
SHA256
8be4d55186e8a106ffdae4b8ea99e06cd873106a8fd45e561cbc3c3e51c79146
-
SHA512
1980dd2f0791576cb8a4712d0148b6ae738e3b8f756edda9777510fcfcbfcb2c8cddabc9c458858ef44f9d325baec556bec4ce1cf128755cc4f3e2591a5af557
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puk:bIDOw9a0DwitDZzcTLk
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-