General
-
Target
2024-05-09_a8bac107e47ae44b5e290618a5a39033_cryptolocker
-
Size
36KB
-
Sample
240509-nxn9lsae55
-
MD5
a8bac107e47ae44b5e290618a5a39033
-
SHA1
9affa467c89fdb2c43ea5577b392720522474113
-
SHA256
2083d021e9ec99a0631423dfc89e45940d1299952e63b2efd4b97662065f8a8b
-
SHA512
3d3b88956326cbca496eeff9145a176ebf57ce434c2740136c44ef47d8d102b6a77590ad33d4532b326d4b1a1c4564c3f98d8f1f91a549e94d88a160192cbdee
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz960SPluRiib:bAvJCYOOvbRPDEgXRc3SSz3SPEz
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_a8bac107e47ae44b5e290618a5a39033_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-09_a8bac107e47ae44b5e290618a5a39033_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-09_a8bac107e47ae44b5e290618a5a39033_cryptolocker
-
Size
36KB
-
MD5
a8bac107e47ae44b5e290618a5a39033
-
SHA1
9affa467c89fdb2c43ea5577b392720522474113
-
SHA256
2083d021e9ec99a0631423dfc89e45940d1299952e63b2efd4b97662065f8a8b
-
SHA512
3d3b88956326cbca496eeff9145a176ebf57ce434c2740136c44ef47d8d102b6a77590ad33d4532b326d4b1a1c4564c3f98d8f1f91a549e94d88a160192cbdee
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz960SPluRiib:bAvJCYOOvbRPDEgXRc3SSz3SPEz
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-