General
-
Target
2024-05-17_da9eaa1a4eaa4f2c49f3d22d8f2a33b5_cryptolocker
-
Size
54KB
-
Sample
240517-vd1a4ahc94
-
MD5
da9eaa1a4eaa4f2c49f3d22d8f2a33b5
-
SHA1
8bba0d2f76df243e7ca24009e3499a2fa19e48ba
-
SHA256
535b70736283951165c7a06caa3ddcbc879eadf7b21b905129ca178bd630d6f0
-
SHA512
0bbc27b9707e8622cad3342dfce9ee3a7f33d4c6b9ef8d6c6a1a4d2ba67f1e920d66a570d272b33e3b15de5946d4cc6054bee7be734e7f3fc155a0e01934320f
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6t:bc/y2lm6iH/NLp17zrV9L
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-17_da9eaa1a4eaa4f2c49f3d22d8f2a33b5_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-17_da9eaa1a4eaa4f2c49f3d22d8f2a33b5_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-17_da9eaa1a4eaa4f2c49f3d22d8f2a33b5_cryptolocker
-
Size
54KB
-
MD5
da9eaa1a4eaa4f2c49f3d22d8f2a33b5
-
SHA1
8bba0d2f76df243e7ca24009e3499a2fa19e48ba
-
SHA256
535b70736283951165c7a06caa3ddcbc879eadf7b21b905129ca178bd630d6f0
-
SHA512
0bbc27b9707e8622cad3342dfce9ee3a7f33d4c6b9ef8d6c6a1a4d2ba67f1e920d66a570d272b33e3b15de5946d4cc6054bee7be734e7f3fc155a0e01934320f
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6t:bc/y2lm6iH/NLp17zrV9L
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-