General
-
Target
2024-05-02_8f5bd5e05def78d18f16423379127be9_cryptolocker
-
Size
47KB
-
Sample
240502-gh559ace95
-
MD5
8f5bd5e05def78d18f16423379127be9
-
SHA1
02811a65841268bf2628960aab13e92450494741
-
SHA256
32d845d589a106362bf7bc9098cc317e7bbbcf24f0a69759cc25eb57d5ac5ec5
-
SHA512
b5a809d6771243bf5e34f8249802295f265ace52282d6d9ee328fc1ea806d7f4eb32fa6245f35d336c07ec2e115b041dab479fede815c97a65501726b1385df3
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDFWy:79mqyNhQMOtEvwDpjBzck1W4y
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_8f5bd5e05def78d18f16423379127be9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-02_8f5bd5e05def78d18f16423379127be9_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-02_8f5bd5e05def78d18f16423379127be9_cryptolocker
-
Size
47KB
-
MD5
8f5bd5e05def78d18f16423379127be9
-
SHA1
02811a65841268bf2628960aab13e92450494741
-
SHA256
32d845d589a106362bf7bc9098cc317e7bbbcf24f0a69759cc25eb57d5ac5ec5
-
SHA512
b5a809d6771243bf5e34f8249802295f265ace52282d6d9ee328fc1ea806d7f4eb32fa6245f35d336c07ec2e115b041dab479fede815c97a65501726b1385df3
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDFWy:79mqyNhQMOtEvwDpjBzck1W4y
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-