General
-
Target
2024-05-21_25b3f0f2c796cd36c9da555434438be7_cryptolocker
-
Size
37KB
-
Sample
240521-s4658aag9w
-
MD5
25b3f0f2c796cd36c9da555434438be7
-
SHA1
c31d8c6b8919963687b8fd7588bdfd5909e0d9c3
-
SHA256
db1cdcb61ba1a59096d7f8992db2693281f7f0f9c0ed9ba65e509d6a517b346e
-
SHA512
cb79c5323f92701112a97b0a95f5df0ad8de63845a722dc42e81e526266da9eb3f44e74154437fc9f42f03815f94119ca2343ddf40de3500acc7dba8518d179b
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qo:fT+hsMQMOtEvwDpjoIHX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_25b3f0f2c796cd36c9da555434438be7_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_25b3f0f2c796cd36c9da555434438be7_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-21_25b3f0f2c796cd36c9da555434438be7_cryptolocker
-
Size
37KB
-
MD5
25b3f0f2c796cd36c9da555434438be7
-
SHA1
c31d8c6b8919963687b8fd7588bdfd5909e0d9c3
-
SHA256
db1cdcb61ba1a59096d7f8992db2693281f7f0f9c0ed9ba65e509d6a517b346e
-
SHA512
cb79c5323f92701112a97b0a95f5df0ad8de63845a722dc42e81e526266da9eb3f44e74154437fc9f42f03815f94119ca2343ddf40de3500acc7dba8518d179b
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4qo:fT+hsMQMOtEvwDpjoIHX
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-