General
-
Target
2024-05-09_579a7aa96d124f6551f723a1dd15ed6a_cryptolocker
-
Size
41KB
-
Sample
240509-22a5faca3v
-
MD5
579a7aa96d124f6551f723a1dd15ed6a
-
SHA1
26f174bd6a2a15adf5f1523973ca4235e68e0b4a
-
SHA256
bbb0c330856ad9344d6b90210dfaad83c9f39e29833671fbea6fc162245a6f72
-
SHA512
272559a4ed52c405a58a01ebd861a0f97be3bba3ffc2bfa805a1908c1d78962afb4c4545029ea45b30d5e17599fe4f2ff7365782f0f44ced0bb1edca4dffde37
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAX:bCDOw9aMDooc+vAX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_579a7aa96d124f6551f723a1dd15ed6a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-09_579a7aa96d124f6551f723a1dd15ed6a_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-09_579a7aa96d124f6551f723a1dd15ed6a_cryptolocker
-
Size
41KB
-
MD5
579a7aa96d124f6551f723a1dd15ed6a
-
SHA1
26f174bd6a2a15adf5f1523973ca4235e68e0b4a
-
SHA256
bbb0c330856ad9344d6b90210dfaad83c9f39e29833671fbea6fc162245a6f72
-
SHA512
272559a4ed52c405a58a01ebd861a0f97be3bba3ffc2bfa805a1908c1d78962afb4c4545029ea45b30d5e17599fe4f2ff7365782f0f44ced0bb1edca4dffde37
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAX:bCDOw9aMDooc+vAX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-