General
-
Target
2024-05-02_670ccd3847578f3a40fe4ee7b5905559_cryptolocker
-
Size
31KB
-
Sample
240502-d5ep2ahh32
-
MD5
670ccd3847578f3a40fe4ee7b5905559
-
SHA1
552083134f0726f999d67b09339a0fc0aae75593
-
SHA256
681d15aa01e067817652eea5de0fecce1ab7871cf13af632f88dd702e89aee0f
-
SHA512
a5dca447bb63066912c394abf30fbd53bfdcde2e98772eecece0d0fc372fbec35e8b43627e7d73d3f66f1b7223da358f79224f6f275c596e2cfa042d202d519d
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGO/:bG74zYcgT/Ekd0ryfjF
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_670ccd3847578f3a40fe4ee7b5905559_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-02_670ccd3847578f3a40fe4ee7b5905559_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-02_670ccd3847578f3a40fe4ee7b5905559_cryptolocker
-
Size
31KB
-
MD5
670ccd3847578f3a40fe4ee7b5905559
-
SHA1
552083134f0726f999d67b09339a0fc0aae75593
-
SHA256
681d15aa01e067817652eea5de0fecce1ab7871cf13af632f88dd702e89aee0f
-
SHA512
a5dca447bb63066912c394abf30fbd53bfdcde2e98772eecece0d0fc372fbec35e8b43627e7d73d3f66f1b7223da358f79224f6f275c596e2cfa042d202d519d
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGO/:bG74zYcgT/Ekd0ryfjF
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-