General
-
Target
2024-05-03_f05b2d348fa7d4f04c89af1b1589bfbe_cryptolocker
-
Size
46KB
-
Sample
240503-3mdgpabe66
-
MD5
f05b2d348fa7d4f04c89af1b1589bfbe
-
SHA1
99ea8ecbf631cda741e10c49f90d4a776f6ac728
-
SHA256
cdac8c12928cadf07733ea2a4287efc13b4ae64e440e06190a6ed7da69a4238b
-
SHA512
59b58ebd8e1f8be82bdb53f3cf452adef0a3e2fe0ffc8cb30c74d06f657c2642b0040fdc492f15a99122fd780561c41e89f9561c5ea6c7ec60fb2e0a805cfd67
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2Vh:79inqyNR/QtOOtEvwDpjBKccJVODvy3o
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_f05b2d348fa7d4f04c89af1b1589bfbe_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-03_f05b2d348fa7d4f04c89af1b1589bfbe_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-03_f05b2d348fa7d4f04c89af1b1589bfbe_cryptolocker
-
Size
46KB
-
MD5
f05b2d348fa7d4f04c89af1b1589bfbe
-
SHA1
99ea8ecbf631cda741e10c49f90d4a776f6ac728
-
SHA256
cdac8c12928cadf07733ea2a4287efc13b4ae64e440e06190a6ed7da69a4238b
-
SHA512
59b58ebd8e1f8be82bdb53f3cf452adef0a3e2fe0ffc8cb30c74d06f657c2642b0040fdc492f15a99122fd780561c41e89f9561c5ea6c7ec60fb2e0a805cfd67
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2Vh:79inqyNR/QtOOtEvwDpjBKccJVODvy3o
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-