General
-
Target
2024-05-17_32619171aa8496f5cfc8295ad61314a5_cryptolocker
-
Size
54KB
-
Sample
240517-v9jyzsah4v
-
MD5
32619171aa8496f5cfc8295ad61314a5
-
SHA1
000695be90ec9855155cca957e953b3834232429
-
SHA256
7f9e39400a39272158bca9e94380ebfb373a43c63ccef2f4a929f0a661a52cc4
-
SHA512
9501413b4c148e8adebf437917befbf63f4155dfb48f9e40d4d6e07cce47456e1fe82defda00af3c69e9c223ed8a90215b0d5e362242d51dd5f07f69397aba98
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6i:bc/y2lm6iH/NLp17zrV9g
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_32619171aa8496f5cfc8295ad61314a5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-17_32619171aa8496f5cfc8295ad61314a5_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-17_32619171aa8496f5cfc8295ad61314a5_cryptolocker
-
Size
54KB
-
MD5
32619171aa8496f5cfc8295ad61314a5
-
SHA1
000695be90ec9855155cca957e953b3834232429
-
SHA256
7f9e39400a39272158bca9e94380ebfb373a43c63ccef2f4a929f0a661a52cc4
-
SHA512
9501413b4c148e8adebf437917befbf63f4155dfb48f9e40d4d6e07cce47456e1fe82defda00af3c69e9c223ed8a90215b0d5e362242d51dd5f07f69397aba98
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6i:bc/y2lm6iH/NLp17zrV9g
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-