General
-
Target
2024-05-08_a2e136bfa6e940aee7ee1c1f2ffa91d8_cryptolocker
-
Size
62KB
-
Sample
240508-svbb7add53
-
MD5
a2e136bfa6e940aee7ee1c1f2ffa91d8
-
SHA1
12bb6fdd5da6f529e641e916091c3f143ce1b3a3
-
SHA256
aa34c50a55e5eb099fe5b504f10368549037b1a89f6ea703ccf76a557217aae1
-
SHA512
6e36dbc89a0fe70267112adf9c5b16aec2500ffd3323e601a6bfc489093124eec5beae0278aa823ab7ec2c858159a4ed5b4f9725eab07d6e5fd8705a97b21a67
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZn2:btng54SMLr+/AO/kIhfoKMHda2
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_a2e136bfa6e940aee7ee1c1f2ffa91d8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-08_a2e136bfa6e940aee7ee1c1f2ffa91d8_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-08_a2e136bfa6e940aee7ee1c1f2ffa91d8_cryptolocker
-
Size
62KB
-
MD5
a2e136bfa6e940aee7ee1c1f2ffa91d8
-
SHA1
12bb6fdd5da6f529e641e916091c3f143ce1b3a3
-
SHA256
aa34c50a55e5eb099fe5b504f10368549037b1a89f6ea703ccf76a557217aae1
-
SHA512
6e36dbc89a0fe70267112adf9c5b16aec2500ffd3323e601a6bfc489093124eec5beae0278aa823ab7ec2c858159a4ed5b4f9725eab07d6e5fd8705a97b21a67
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZn2:btng54SMLr+/AO/kIhfoKMHda2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-