General
-
Target
2024-05-04_54a78028af67ccda86570434245b65ed_cryptolocker
-
Size
39KB
-
Sample
240504-3dbazafa7s
-
MD5
54a78028af67ccda86570434245b65ed
-
SHA1
e4db9eaacc144a20ff0ac576eb6e1cf922eea9d6
-
SHA256
8319b574f71c75e7d9ba1ebd3266be9839f82764c46eada354589fcf43d6c06e
-
SHA512
2a69e72083afb38fd8047ff7965ee365c87f9c1f3ab106844912ce1f89fa8b22ef1478784c31ba323a58d06e8c66d76016e18a6827c309f1b1cd33083c7e30e3
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4HmG:bA6YcA/X6G0W1BGG
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_54a78028af67ccda86570434245b65ed_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-04_54a78028af67ccda86570434245b65ed_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-04_54a78028af67ccda86570434245b65ed_cryptolocker
-
Size
39KB
-
MD5
54a78028af67ccda86570434245b65ed
-
SHA1
e4db9eaacc144a20ff0ac576eb6e1cf922eea9d6
-
SHA256
8319b574f71c75e7d9ba1ebd3266be9839f82764c46eada354589fcf43d6c06e
-
SHA512
2a69e72083afb38fd8047ff7965ee365c87f9c1f3ab106844912ce1f89fa8b22ef1478784c31ba323a58d06e8c66d76016e18a6827c309f1b1cd33083c7e30e3
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4HmG:bA6YcA/X6G0W1BGG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-