General
-
Target
2024-05-08_487acf2ae809cd6f0b91cd5426ffbadd_cryptolocker
-
Size
50KB
-
Sample
240508-d1e51aah42
-
MD5
487acf2ae809cd6f0b91cd5426ffbadd
-
SHA1
f57fc1bf16fd1ddcfe104acbc4d05e196bbe0a33
-
SHA256
3927cd46077cb6392960d3f4449b2f6f35bbd39cd86fa32341a0c38e1ed29ed2
-
SHA512
61ba8858390f6cff89979c7071936b5cb54fa9222e90cae83808f8a213a56e84c9f3f6847e8e593a5e5c788a85e6765c69371cd79a596ab0d0fad0a6d0d0564f
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIC0e:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7F
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_487acf2ae809cd6f0b91cd5426ffbadd_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-08_487acf2ae809cd6f0b91cd5426ffbadd_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-08_487acf2ae809cd6f0b91cd5426ffbadd_cryptolocker
-
Size
50KB
-
MD5
487acf2ae809cd6f0b91cd5426ffbadd
-
SHA1
f57fc1bf16fd1ddcfe104acbc4d05e196bbe0a33
-
SHA256
3927cd46077cb6392960d3f4449b2f6f35bbd39cd86fa32341a0c38e1ed29ed2
-
SHA512
61ba8858390f6cff89979c7071936b5cb54fa9222e90cae83808f8a213a56e84c9f3f6847e8e593a5e5c788a85e6765c69371cd79a596ab0d0fad0a6d0d0564f
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIC0e:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7F
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-