General
-
Target
2024-05-21_668c0bf4b7f161769921c15317db6b65_cryptolocker
-
Size
38KB
-
Sample
240521-s4ar1sag5y
-
MD5
668c0bf4b7f161769921c15317db6b65
-
SHA1
a0cc35f8074a8bf0d5cfcbaec2c4de403ef9d18b
-
SHA256
a08527f653acf5a6fbf5f19cb3f6eed3a62e2de34b168afcc67542874c4fb93d
-
SHA512
3a52ee7624478ae16eb65bd16b6899e79ffe5b02d4e0779dbe020afdbfd941e00818cc96e2467b8060cf8b38ee859165aa960a03de676c279a6a2a8270376e62
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZyS:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X4
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_668c0bf4b7f161769921c15317db6b65_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-21_668c0bf4b7f161769921c15317db6b65_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_668c0bf4b7f161769921c15317db6b65_cryptolocker
-
Size
38KB
-
MD5
668c0bf4b7f161769921c15317db6b65
-
SHA1
a0cc35f8074a8bf0d5cfcbaec2c4de403ef9d18b
-
SHA256
a08527f653acf5a6fbf5f19cb3f6eed3a62e2de34b168afcc67542874c4fb93d
-
SHA512
3a52ee7624478ae16eb65bd16b6899e79ffe5b02d4e0779dbe020afdbfd941e00818cc96e2467b8060cf8b38ee859165aa960a03de676c279a6a2a8270376e62
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZyS:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X4
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-