General
-
Target
2024-05-21_fb8a993ff85c9bd3e3c39f3e3a24f206_cryptolocker
-
Size
38KB
-
Sample
240521-tkmg5sbd51
-
MD5
fb8a993ff85c9bd3e3c39f3e3a24f206
-
SHA1
c6a4168932754e544cc46e2635e2a364a9a23701
-
SHA256
afadcb46bc15ba8ed5502e98cec2451cac0f00b341b48c8b13b70572f3e029ba
-
SHA512
26ad35e41b1e2ec6d515afa9f4a447c4767643d37909e389c3bd9bb11df55185edef4e13b55aa0fb4b691a6453dd7014b6dcf137d64a68ad18cb6ec5eb828cc7
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpD:bc/y2lLRU6zA6lpD
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_fb8a993ff85c9bd3e3c39f3e3a24f206_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-21_fb8a993ff85c9bd3e3c39f3e3a24f206_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_fb8a993ff85c9bd3e3c39f3e3a24f206_cryptolocker
-
Size
38KB
-
MD5
fb8a993ff85c9bd3e3c39f3e3a24f206
-
SHA1
c6a4168932754e544cc46e2635e2a364a9a23701
-
SHA256
afadcb46bc15ba8ed5502e98cec2451cac0f00b341b48c8b13b70572f3e029ba
-
SHA512
26ad35e41b1e2ec6d515afa9f4a447c4767643d37909e389c3bd9bb11df55185edef4e13b55aa0fb4b691a6453dd7014b6dcf137d64a68ad18cb6ec5eb828cc7
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpD:bc/y2lLRU6zA6lpD
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-