General
-
Target
2024-05-22_1e459efa9191ccf70a9d36c52f4f680b_cryptolocker
-
Size
43KB
-
Sample
240522-bzx83sgd3x
-
MD5
1e459efa9191ccf70a9d36c52f4f680b
-
SHA1
d8ec9ce9026f5a0f7400b7283d721fea034695b2
-
SHA256
f18ed735e094012b3563947834d89c7d198af9e48452ded31ff1dea1015fea69
-
SHA512
ed26307bc14122c906476c2532309eb54c41a8ba938a774e05ad7175ae28cc59dc813b940d77df859aa82c0bd1a2002297b603cb2edf2618c29f2e770186320d
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUkT:bm74zYcgT/EkM0ryfjdT
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_1e459efa9191ccf70a9d36c52f4f680b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_1e459efa9191ccf70a9d36c52f4f680b_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_1e459efa9191ccf70a9d36c52f4f680b_cryptolocker
-
Size
43KB
-
MD5
1e459efa9191ccf70a9d36c52f4f680b
-
SHA1
d8ec9ce9026f5a0f7400b7283d721fea034695b2
-
SHA256
f18ed735e094012b3563947834d89c7d198af9e48452ded31ff1dea1015fea69
-
SHA512
ed26307bc14122c906476c2532309eb54c41a8ba938a774e05ad7175ae28cc59dc813b940d77df859aa82c0bd1a2002297b603cb2edf2618c29f2e770186320d
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUkT:bm74zYcgT/EkM0ryfjdT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-