General
-
Target
2024-05-21_870ed3c8f2502512727f4db938461974_cryptolocker
-
Size
37KB
-
Sample
240521-fqpmssae4x
-
MD5
870ed3c8f2502512727f4db938461974
-
SHA1
ac0b54516184b6cfa870979cbace898e84b1d7dd
-
SHA256
e4317473aa8174626cbb6523e43b0a91125380239ab34ebe6620f9d5c0f97869
-
SHA512
586f16971078cb099e73eb32b7c6e0251cf8e929034ef108eb5934b760702d0e09cc946e8cd56c23ca871b12d0dac1f13347c5fb24d266ea94baaf5d432c203b
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mri:bc/y2lLRU6zA6qG
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_870ed3c8f2502512727f4db938461974_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_870ed3c8f2502512727f4db938461974_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_870ed3c8f2502512727f4db938461974_cryptolocker
-
Size
37KB
-
MD5
870ed3c8f2502512727f4db938461974
-
SHA1
ac0b54516184b6cfa870979cbace898e84b1d7dd
-
SHA256
e4317473aa8174626cbb6523e43b0a91125380239ab34ebe6620f9d5c0f97869
-
SHA512
586f16971078cb099e73eb32b7c6e0251cf8e929034ef108eb5934b760702d0e09cc946e8cd56c23ca871b12d0dac1f13347c5fb24d266ea94baaf5d432c203b
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mri:bc/y2lLRU6zA6qG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-