General
-
Target
2024-05-22_ba38fb5ff88d6a3dc02a2ea4aa5e6656_cryptolocker
-
Size
52KB
-
Sample
240522-1r4tbsab9s
-
MD5
ba38fb5ff88d6a3dc02a2ea4aa5e6656
-
SHA1
f67b9b8302cccf94f9386b66ef2ba864b8ffbfd2
-
SHA256
787998bfc6ddc14210de41e8e446e196198772caad9db77c7d4554acb38ff788
-
SHA512
d35cd9b034a30614051f15c1e22e1e9bae2e616f646cf80056752d14b05490f621c30b24fd7199c7399ee6cded91ca73c35067cf94bcc571b74c666fbcc8138b
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfSAd:79mqyNhQMOtEvwDpjBxe8GGfVd
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_ba38fb5ff88d6a3dc02a2ea4aa5e6656_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_ba38fb5ff88d6a3dc02a2ea4aa5e6656_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_ba38fb5ff88d6a3dc02a2ea4aa5e6656_cryptolocker
-
Size
52KB
-
MD5
ba38fb5ff88d6a3dc02a2ea4aa5e6656
-
SHA1
f67b9b8302cccf94f9386b66ef2ba864b8ffbfd2
-
SHA256
787998bfc6ddc14210de41e8e446e196198772caad9db77c7d4554acb38ff788
-
SHA512
d35cd9b034a30614051f15c1e22e1e9bae2e616f646cf80056752d14b05490f621c30b24fd7199c7399ee6cded91ca73c35067cf94bcc571b74c666fbcc8138b
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfSAd:79mqyNhQMOtEvwDpjBxe8GGfVd
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-