General
-
Target
2024-05-08_42673a63fb8b56d4c8d7d2e7edf537cc_cryptolocker
-
Size
52KB
-
Sample
240508-ssramadc39
-
MD5
42673a63fb8b56d4c8d7d2e7edf537cc
-
SHA1
161fffd51f3f011b9e00990a87f094941a9d0af5
-
SHA256
75bd67eb7f498a435e5ec9702f85bea5b98c1c14f4f7d9c8ee4e1b310c92c7ca
-
SHA512
6490dc2a5d102fc428f6b9fc808af968611c53e06dfd58e0d5f485ca1e3d793ed45322f897727192bf98c02326c7f7f1c9ba38d06a652053ec446ee62ee11331
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKxk:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_42673a63fb8b56d4c8d7d2e7edf537cc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-08_42673a63fb8b56d4c8d7d2e7edf537cc_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-08_42673a63fb8b56d4c8d7d2e7edf537cc_cryptolocker
-
Size
52KB
-
MD5
42673a63fb8b56d4c8d7d2e7edf537cc
-
SHA1
161fffd51f3f011b9e00990a87f094941a9d0af5
-
SHA256
75bd67eb7f498a435e5ec9702f85bea5b98c1c14f4f7d9c8ee4e1b310c92c7ca
-
SHA512
6490dc2a5d102fc428f6b9fc808af968611c53e06dfd58e0d5f485ca1e3d793ed45322f897727192bf98c02326c7f7f1c9ba38d06a652053ec446ee62ee11331
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKxk:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-