General
-
Target
2024-05-21_800616ed379b4d3d2d0d7de36dc30c43_cryptolocker
-
Size
43KB
-
Sample
240521-s6mjlaah5x
-
MD5
800616ed379b4d3d2d0d7de36dc30c43
-
SHA1
d73cefb2088ecfaaf05d8f58e098e5e97c8f2e61
-
SHA256
9a28fbf23674ffef0348d34195c887a90e527d6959f04a73c8c99acdbe35eb42
-
SHA512
02214e92c9ccfd0692c692fd3577d542df5bb9ce97cbeb6663e07396d0e5c5050cc44d4c55ba9e8c34cdbbe3e8e6b1c65098a31ecc597bee94997cc98aff222a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydQ:bCDOw9aMDooc+vAyO
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_800616ed379b4d3d2d0d7de36dc30c43_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_800616ed379b4d3d2d0d7de36dc30c43_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_800616ed379b4d3d2d0d7de36dc30c43_cryptolocker
-
Size
43KB
-
MD5
800616ed379b4d3d2d0d7de36dc30c43
-
SHA1
d73cefb2088ecfaaf05d8f58e098e5e97c8f2e61
-
SHA256
9a28fbf23674ffef0348d34195c887a90e527d6959f04a73c8c99acdbe35eb42
-
SHA512
02214e92c9ccfd0692c692fd3577d542df5bb9ce97cbeb6663e07396d0e5c5050cc44d4c55ba9e8c34cdbbe3e8e6b1c65098a31ecc597bee94997cc98aff222a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydQ:bCDOw9aMDooc+vAyO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-