General
-
Target
2024-05-13_0452a9bbe1cec35fa9f1f2193df6ee2d_cryptolocker
-
Size
59KB
-
Sample
240513-r4a74saf61
-
MD5
0452a9bbe1cec35fa9f1f2193df6ee2d
-
SHA1
1d426174c70b5ee8e449092fdb3004dcea05599d
-
SHA256
2df4eaffb34e510fae657d80eaaae85bb38546b3e84882525413c1d8e183ee6b
-
SHA512
cd22116f890b26fcdcce577d59f5e058436929a149ef0101a8da91f1a30d4d1c5d01c8cdba5f395131611a345a32ffa6dbd3708667cad5535d4699a17ade12e1
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHxy:btng54SMLr+/AO/kIhfoKMHdh
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-13_0452a9bbe1cec35fa9f1f2193df6ee2d_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-13_0452a9bbe1cec35fa9f1f2193df6ee2d_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-13_0452a9bbe1cec35fa9f1f2193df6ee2d_cryptolocker
-
Size
59KB
-
MD5
0452a9bbe1cec35fa9f1f2193df6ee2d
-
SHA1
1d426174c70b5ee8e449092fdb3004dcea05599d
-
SHA256
2df4eaffb34e510fae657d80eaaae85bb38546b3e84882525413c1d8e183ee6b
-
SHA512
cd22116f890b26fcdcce577d59f5e058436929a149ef0101a8da91f1a30d4d1c5d01c8cdba5f395131611a345a32ffa6dbd3708667cad5535d4699a17ade12e1
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHxy:btng54SMLr+/AO/kIhfoKMHdh
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-