General
-
Target
2024-05-14_552974f1f949b2c5b0c8e0c38269328e_cryptolocker
-
Size
35KB
-
Sample
240514-y7e4ssfd46
-
MD5
552974f1f949b2c5b0c8e0c38269328e
-
SHA1
30f80b0bb1bd647d20405faab6fe57513a463976
-
SHA256
e6c9b00617f0ccf69ced32f2724d1d4f86d1767b46440d42d90946e0b4d06151
-
SHA512
7593e614c50ebbb7d415ae3ac1bed6de5bf0bfa8274a6506ee23e7ebbe2350898ca14768e73b891c55d7b3a94a770b14d4d7791e2430d49e2ce353646dd486c6
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx+Mn:bA74zYcgT/Ekd0ryfjPIunqpeNswm6+M
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-14_552974f1f949b2c5b0c8e0c38269328e_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-14_552974f1f949b2c5b0c8e0c38269328e_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-14_552974f1f949b2c5b0c8e0c38269328e_cryptolocker
-
Size
35KB
-
MD5
552974f1f949b2c5b0c8e0c38269328e
-
SHA1
30f80b0bb1bd647d20405faab6fe57513a463976
-
SHA256
e6c9b00617f0ccf69ced32f2724d1d4f86d1767b46440d42d90946e0b4d06151
-
SHA512
7593e614c50ebbb7d415ae3ac1bed6de5bf0bfa8274a6506ee23e7ebbe2350898ca14768e73b891c55d7b3a94a770b14d4d7791e2430d49e2ce353646dd486c6
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx+Mn:bA74zYcgT/Ekd0ryfjPIunqpeNswm6+M
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-