General
-
Target
2024-05-15_d522e942e828f4a13897d63651825186_cryptolocker
-
Size
55KB
-
Sample
240515-fqhjgsae3w
-
MD5
d522e942e828f4a13897d63651825186
-
SHA1
a5cb8dfeb5225370d0c786bc4c43222b2f2049a0
-
SHA256
97a99af395f1e814a0c7467f3d482121aa92e1399c3bc2319bbc901dc2805f1a
-
SHA512
df128ad904d9ee01a5f9da883719cfa121deee1002fbdd8882cf9338303bae8ad0f7caf9bc51cf9d2c119011303766421481df0c26871719a1bef9adaa19dca0
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puQ:bIDOw9a0DwitDZzcTLQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_d522e942e828f4a13897d63651825186_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-15_d522e942e828f4a13897d63651825186_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-15_d522e942e828f4a13897d63651825186_cryptolocker
-
Size
55KB
-
MD5
d522e942e828f4a13897d63651825186
-
SHA1
a5cb8dfeb5225370d0c786bc4c43222b2f2049a0
-
SHA256
97a99af395f1e814a0c7467f3d482121aa92e1399c3bc2319bbc901dc2805f1a
-
SHA512
df128ad904d9ee01a5f9da883719cfa121deee1002fbdd8882cf9338303bae8ad0f7caf9bc51cf9d2c119011303766421481df0c26871719a1bef9adaa19dca0
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puQ:bIDOw9a0DwitDZzcTLQ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-