General
-
Target
2024-05-22_4cd25b17a9417483d8be7a7f32989f5f_cryptolocker
-
Size
52KB
-
Sample
240522-c1bxxahf8z
-
MD5
4cd25b17a9417483d8be7a7f32989f5f
-
SHA1
1fe188cb7b45e2ad2934f72aa4f699a4e70b102c
-
SHA256
c0660e6b0720c8c3bc524edc1b4c17670ef1a65f5b8f7ab20a954b11f1d1440a
-
SHA512
28e1dc66650e1cf360bb2a914a0c8318cff46154039e6853758cd0e56b46af93191ce39ee55c2c6fcec122642e8609b4938459f60aa232a1bbb83240894861fd
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaT2:X6QFElP6n+gJBMOtEvwDpjBtExmlC
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_4cd25b17a9417483d8be7a7f32989f5f_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-22_4cd25b17a9417483d8be7a7f32989f5f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_4cd25b17a9417483d8be7a7f32989f5f_cryptolocker
-
Size
52KB
-
MD5
4cd25b17a9417483d8be7a7f32989f5f
-
SHA1
1fe188cb7b45e2ad2934f72aa4f699a4e70b102c
-
SHA256
c0660e6b0720c8c3bc524edc1b4c17670ef1a65f5b8f7ab20a954b11f1d1440a
-
SHA512
28e1dc66650e1cf360bb2a914a0c8318cff46154039e6853758cd0e56b46af93191ce39ee55c2c6fcec122642e8609b4938459f60aa232a1bbb83240894861fd
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaT2:X6QFElP6n+gJBMOtEvwDpjBtExmlC
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-