General
-
Target
2024-05-21_fab42c1377ac4b9a6f26f083d0e0ff24_cryptolocker
-
Size
64KB
-
Sample
240521-kqawvsfb49
-
MD5
fab42c1377ac4b9a6f26f083d0e0ff24
-
SHA1
bb887c342ae9d15698ea228afebf95e33ff59943
-
SHA256
6e482871d96202f933fadaa908b999319d60c6170f5219aa29b47d0802c01034
-
SHA512
b1e59e923a403e5810b29f51318c0ba5170c52bca8b1719a70fe93f451789e84ffa99893c266025324a2012d1b8eac8288abf8e9bbdda2d2eb374840b1b21293
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wk:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_fab42c1377ac4b9a6f26f083d0e0ff24_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-21_fab42c1377ac4b9a6f26f083d0e0ff24_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_fab42c1377ac4b9a6f26f083d0e0ff24_cryptolocker
-
Size
64KB
-
MD5
fab42c1377ac4b9a6f26f083d0e0ff24
-
SHA1
bb887c342ae9d15698ea228afebf95e33ff59943
-
SHA256
6e482871d96202f933fadaa908b999319d60c6170f5219aa29b47d0802c01034
-
SHA512
b1e59e923a403e5810b29f51318c0ba5170c52bca8b1719a70fe93f451789e84ffa99893c266025324a2012d1b8eac8288abf8e9bbdda2d2eb374840b1b21293
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293Wk:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-