General
-
Target
2024-05-16_3d659e5deb64600e274cf86891a8d093_cryptolocker
-
Size
61KB
-
Sample
240516-3xnemsfd83
-
MD5
3d659e5deb64600e274cf86891a8d093
-
SHA1
f45d5a78fa9ed38a79ec16ab2c27719c4dcafe0a
-
SHA256
ddeb5e7e8bb7c86bb1ea499c4499db3153dd1122cb235fb89df83533d43a7e78
-
SHA512
c51a682e7798b2df220cce5d90ef5d1849d3d68890d4d28cffd5da5b4b1c13ecfe0b2f3e013bdc57a8489a84356fb0e0ec77ffe591918a844516cce026c25aa5
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnxo:btng54SMLr+/AO/kIhfoKMHda6
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-16_3d659e5deb64600e274cf86891a8d093_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-16_3d659e5deb64600e274cf86891a8d093_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-16_3d659e5deb64600e274cf86891a8d093_cryptolocker
-
Size
61KB
-
MD5
3d659e5deb64600e274cf86891a8d093
-
SHA1
f45d5a78fa9ed38a79ec16ab2c27719c4dcafe0a
-
SHA256
ddeb5e7e8bb7c86bb1ea499c4499db3153dd1122cb235fb89df83533d43a7e78
-
SHA512
c51a682e7798b2df220cce5d90ef5d1849d3d68890d4d28cffd5da5b4b1c13ecfe0b2f3e013bdc57a8489a84356fb0e0ec77ffe591918a844516cce026c25aa5
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnxo:btng54SMLr+/AO/kIhfoKMHda6
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-