General
-
Target
2024-05-12_4b6ce2cdd406a7974093f03562488b0e_cryptolocker
-
Size
38KB
-
Sample
240512-pl3tashf98
-
MD5
4b6ce2cdd406a7974093f03562488b0e
-
SHA1
d2ced22ced9e941e1bc44c538d9def949382de08
-
SHA256
1eca48ebeeaf4a61c022065f469e2c1fd76ce51d32ae331622a9dd8965820b4e
-
SHA512
4b03220c4a3ac2812cb3b9f6c7f162f800451cc97f1c1d97425082117181c4290c664d253693f6e448a288f06d6e2b4e817e77d37559c1347308573b2463e3cc
-
SSDEEP
768:bA74zYcgT/Ekd0ryfj86U8zbUYqSFq6pw:bA6YcA/X6GISzRqAw
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-12_4b6ce2cdd406a7974093f03562488b0e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-12_4b6ce2cdd406a7974093f03562488b0e_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-12_4b6ce2cdd406a7974093f03562488b0e_cryptolocker
-
Size
38KB
-
MD5
4b6ce2cdd406a7974093f03562488b0e
-
SHA1
d2ced22ced9e941e1bc44c538d9def949382de08
-
SHA256
1eca48ebeeaf4a61c022065f469e2c1fd76ce51d32ae331622a9dd8965820b4e
-
SHA512
4b03220c4a3ac2812cb3b9f6c7f162f800451cc97f1c1d97425082117181c4290c664d253693f6e448a288f06d6e2b4e817e77d37559c1347308573b2463e3cc
-
SSDEEP
768:bA74zYcgT/Ekd0ryfj86U8zbUYqSFq6pw:bA6YcA/X6GISzRqAw
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-