General
-
Target
2024-05-22_c133d94f8b116d1acb8e3a3e812e118d_cryptolocker
-
Size
76KB
-
Sample
240522-3e9vxsdb2y
-
MD5
c133d94f8b116d1acb8e3a3e812e118d
-
SHA1
f82ad5bf5cd2c833e2facd09b87e12c01bf99e35
-
SHA256
522212a8f26fd82b92b13730b8f6cef51ec34364854117e339dd180435cded82
-
SHA512
e758889e990aa39ab4cb7b2fdcac52a26ed79e025cd762448d777cff00b0a38b644e291d0fb3d7824e63fda8126a2bb2ea8e02cb81b5e8d37dc4d2eb3bf9ff82
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLk8:X6a+SOtEvwDpjBZYvQd2r
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_c133d94f8b116d1acb8e3a3e812e118d_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-22_c133d94f8b116d1acb8e3a3e812e118d_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_c133d94f8b116d1acb8e3a3e812e118d_cryptolocker
-
Size
76KB
-
MD5
c133d94f8b116d1acb8e3a3e812e118d
-
SHA1
f82ad5bf5cd2c833e2facd09b87e12c01bf99e35
-
SHA256
522212a8f26fd82b92b13730b8f6cef51ec34364854117e339dd180435cded82
-
SHA512
e758889e990aa39ab4cb7b2fdcac52a26ed79e025cd762448d777cff00b0a38b644e291d0fb3d7824e63fda8126a2bb2ea8e02cb81b5e8d37dc4d2eb3bf9ff82
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLk8:X6a+SOtEvwDpjBZYvQd2r
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-