General
-
Target
2024-05-21_53459cb417384be20ab946cf311c352a_cryptolocker
-
Size
37KB
-
Sample
240521-s13zdsae88
-
MD5
53459cb417384be20ab946cf311c352a
-
SHA1
853dc7ed4652f355bc26f7f94370e6e3f0e66df1
-
SHA256
51c5fd50dad412619bc3e7fccc10bd64ec57398cbe1622425532a2401238ee6a
-
SHA512
03d11bcfe37a90494440dd8d43e238da3ceef3d7b40eb42233404dce7477fefe7787111e7144c7b703b68a77dd67396f9c7063fe327b7160ae480e20aab7a854
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4q7:fT+hsMQMOtEvwDpjoIHE
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_53459cb417384be20ab946cf311c352a_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-21_53459cb417384be20ab946cf311c352a_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_53459cb417384be20ab946cf311c352a_cryptolocker
-
Size
37KB
-
MD5
53459cb417384be20ab946cf311c352a
-
SHA1
853dc7ed4652f355bc26f7f94370e6e3f0e66df1
-
SHA256
51c5fd50dad412619bc3e7fccc10bd64ec57398cbe1622425532a2401238ee6a
-
SHA512
03d11bcfe37a90494440dd8d43e238da3ceef3d7b40eb42233404dce7477fefe7787111e7144c7b703b68a77dd67396f9c7063fe327b7160ae480e20aab7a854
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4q7:fT+hsMQMOtEvwDpjoIHE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-