General
-
Target
2024-05-03_625320a6345714752e0bf08e4109e992_cryptolocker
-
Size
34KB
-
Sample
240503-d7rsdagc47
-
MD5
625320a6345714752e0bf08e4109e992
-
SHA1
b1fff4ee18a808342a676d135267667a7ffa7195
-
SHA256
e522ec16aa6f7a999f4ecb9ec0030c6db16c2f425a41830f788ca8f36999fd86
-
SHA512
292733ff47258d14ffc847c3d136955f631269471c6508faec426e7f83f772e16b2ff0a784e322c914ee4ab65109d118e7abebce45d589f6ddff821eaa230690
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp75:bxNrC7kYo1Fxf2rY19
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_625320a6345714752e0bf08e4109e992_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-03_625320a6345714752e0bf08e4109e992_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-03_625320a6345714752e0bf08e4109e992_cryptolocker
-
Size
34KB
-
MD5
625320a6345714752e0bf08e4109e992
-
SHA1
b1fff4ee18a808342a676d135267667a7ffa7195
-
SHA256
e522ec16aa6f7a999f4ecb9ec0030c6db16c2f425a41830f788ca8f36999fd86
-
SHA512
292733ff47258d14ffc847c3d136955f631269471c6508faec426e7f83f772e16b2ff0a784e322c914ee4ab65109d118e7abebce45d589f6ddff821eaa230690
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp75:bxNrC7kYo1Fxf2rY19
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-