General
-
Target
2024-05-03_678c65dd653483f5f857b0aa27462afb_cryptolocker
-
Size
63KB
-
Sample
240503-d79yyseb2y
-
MD5
678c65dd653483f5f857b0aa27462afb
-
SHA1
d2139819455b4a71d2464b015a57b38219108255
-
SHA256
4b5929339e5d0f1613983fbe60d23ad3ed40ff6171b805239cd588d75a43ea66
-
SHA512
806a0b1f6287aaead26bc597dfd22ba944e00415202675fa43c95bce48a71d567ba8080870587fdadc508dda716ad7297ec377744a1a7b19341aa6f5dc83ddfa
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaq:btng54SMLr+/AO/kIhfoKMHdw
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_678c65dd653483f5f857b0aa27462afb_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-03_678c65dd653483f5f857b0aa27462afb_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-03_678c65dd653483f5f857b0aa27462afb_cryptolocker
-
Size
63KB
-
MD5
678c65dd653483f5f857b0aa27462afb
-
SHA1
d2139819455b4a71d2464b015a57b38219108255
-
SHA256
4b5929339e5d0f1613983fbe60d23ad3ed40ff6171b805239cd588d75a43ea66
-
SHA512
806a0b1f6287aaead26bc597dfd22ba944e00415202675fa43c95bce48a71d567ba8080870587fdadc508dda716ad7297ec377744a1a7b19341aa6f5dc83ddfa
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaq:btng54SMLr+/AO/kIhfoKMHdw
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-