General
-
Target
2024-05-17_0af7a2ee4b3630eedd0c851d749d3dcd_cryptolocker
-
Size
84KB
-
Sample
240517-pk572ahc55
-
MD5
0af7a2ee4b3630eedd0c851d749d3dcd
-
SHA1
bd2b19241fc1433725c5acf3526e906ec3090023
-
SHA256
17dae8e6ebeab187b9b4e93764b2aeb5e9f099309dcd49ecc2a5ab9fb2a40a2a
-
SHA512
617bf1ed7389667aadaa15d872251e78ef26fce8280648f6d5eac833a88de64e1752c4f3ba818a68fddd234d35eb9a1a01aa301efd80baac936ae277d22db8ef
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrhG:TCjsIOtEvwDpj5HE/OUHnSMS
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_0af7a2ee4b3630eedd0c851d749d3dcd_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-17_0af7a2ee4b3630eedd0c851d749d3dcd_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-17_0af7a2ee4b3630eedd0c851d749d3dcd_cryptolocker
-
Size
84KB
-
MD5
0af7a2ee4b3630eedd0c851d749d3dcd
-
SHA1
bd2b19241fc1433725c5acf3526e906ec3090023
-
SHA256
17dae8e6ebeab187b9b4e93764b2aeb5e9f099309dcd49ecc2a5ab9fb2a40a2a
-
SHA512
617bf1ed7389667aadaa15d872251e78ef26fce8280648f6d5eac833a88de64e1752c4f3ba818a68fddd234d35eb9a1a01aa301efd80baac936ae277d22db8ef
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrhG:TCjsIOtEvwDpj5HE/OUHnSMS
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-