General
-
Target
2024-05-09_4258191977def988d750fa2013d4aa01_cryptolocker
-
Size
53KB
-
Sample
240509-d4phvagd2v
-
MD5
4258191977def988d750fa2013d4aa01
-
SHA1
c3ebc7be57166624e34e787914455e918b830d3e
-
SHA256
4a278ce2a6e9a0d9cdbd11472f7f459a9c14496520078aae1dd6f714020bfe40
-
SHA512
931a4b087f5c5c3a4b0d6038276feab460ce71f53e9a88e121537d4e3b9c3c5112d36889597ea7fb1431a4c606b5efed3ec4af1088ac462d85aa0ccf49a0b539
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKxC:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_4258191977def988d750fa2013d4aa01_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-09_4258191977def988d750fa2013d4aa01_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_4258191977def988d750fa2013d4aa01_cryptolocker
-
Size
53KB
-
MD5
4258191977def988d750fa2013d4aa01
-
SHA1
c3ebc7be57166624e34e787914455e918b830d3e
-
SHA256
4a278ce2a6e9a0d9cdbd11472f7f459a9c14496520078aae1dd6f714020bfe40
-
SHA512
931a4b087f5c5c3a4b0d6038276feab460ce71f53e9a88e121537d4e3b9c3c5112d36889597ea7fb1431a4c606b5efed3ec4af1088ac462d85aa0ccf49a0b539
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKxC:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-