General
-
Target
2024-05-21_b712f54d1843f7f4991b919594c74fd8_cryptolocker
-
Size
43KB
-
Sample
240521-s637caah6z
-
MD5
b712f54d1843f7f4991b919594c74fd8
-
SHA1
b1cab6f6a500c6f1a1ac15ec7b49f34f9b5b15a5
-
SHA256
795ff648bd79eb6e4dedfbd2d284b87da95da664479196449ea4836896db6c56
-
SHA512
7b8b09f5252c06511c3b5f1c2916210950a383784e3bfaa45707c61791ecb29e13b3d3cbdc9f5b6e889012fe8b7156e1c1700f420f6a50370d6273f249ac603d
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydC:bCDOw9aMDooc+vAyU
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_b712f54d1843f7f4991b919594c74fd8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-21_b712f54d1843f7f4991b919594c74fd8_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_b712f54d1843f7f4991b919594c74fd8_cryptolocker
-
Size
43KB
-
MD5
b712f54d1843f7f4991b919594c74fd8
-
SHA1
b1cab6f6a500c6f1a1ac15ec7b49f34f9b5b15a5
-
SHA256
795ff648bd79eb6e4dedfbd2d284b87da95da664479196449ea4836896db6c56
-
SHA512
7b8b09f5252c06511c3b5f1c2916210950a383784e3bfaa45707c61791ecb29e13b3d3cbdc9f5b6e889012fe8b7156e1c1700f420f6a50370d6273f249ac603d
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydC:bCDOw9aMDooc+vAyU
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-