General
-
Target
2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker
-
Size
37KB
-
Sample
240501-fev1fagb9t
-
MD5
b12a57a4a4ede49163afdcb6018111ce
-
SHA1
1be18aeaa81d7f0379e4626d728b67274b203f10
-
SHA256
0cafa70a39e7ed7d07bfc58b964aade9d148a56bf4fee92ab220eedcdbc6629d
-
SHA512
ef29f5c628af55741ab9d580dfeeb8e1194d088e29127b7adbab9e3ff87ccbdae5571bea087fb2bcd9cf296805b1d00479e2be57686004ac274e81d1a3a94444
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mM:bc/y2lLRU6zA6qM
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker
-
Size
37KB
-
MD5
b12a57a4a4ede49163afdcb6018111ce
-
SHA1
1be18aeaa81d7f0379e4626d728b67274b203f10
-
SHA256
0cafa70a39e7ed7d07bfc58b964aade9d148a56bf4fee92ab220eedcdbc6629d
-
SHA512
ef29f5c628af55741ab9d580dfeeb8e1194d088e29127b7adbab9e3ff87ccbdae5571bea087fb2bcd9cf296805b1d00479e2be57686004ac274e81d1a3a94444
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mM:bc/y2lLRU6zA6qM
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-