General
-
Target
2024-05-22_ad45c0e242459a2e68d3e8565b6fbfff_cryptolocker
-
Size
33KB
-
Sample
240522-c8bl4saa4s
-
MD5
ad45c0e242459a2e68d3e8565b6fbfff
-
SHA1
d1ce40fd8a86cb1a785450ace07d373bb8358947
-
SHA256
3c0ee3505c17a7021ffdf287d6088161d23b1c9bcecde1f8ee8647c76c58981e
-
SHA512
fb61c743402f844c0a05f1bc428a5be71a7d527a99e9f7dc8da55d50c2d94d7bd68f74734dfb6acfb97c59b84d3ba2cd155fb3e55e9bae7b79ee4a2527e99a67
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGLZ9t:bG74zYcgT/Ekd0ryfjgjt
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_ad45c0e242459a2e68d3e8565b6fbfff_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-22_ad45c0e242459a2e68d3e8565b6fbfff_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_ad45c0e242459a2e68d3e8565b6fbfff_cryptolocker
-
Size
33KB
-
MD5
ad45c0e242459a2e68d3e8565b6fbfff
-
SHA1
d1ce40fd8a86cb1a785450ace07d373bb8358947
-
SHA256
3c0ee3505c17a7021ffdf287d6088161d23b1c9bcecde1f8ee8647c76c58981e
-
SHA512
fb61c743402f844c0a05f1bc428a5be71a7d527a99e9f7dc8da55d50c2d94d7bd68f74734dfb6acfb97c59b84d3ba2cd155fb3e55e9bae7b79ee4a2527e99a67
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGLZ9t:bG74zYcgT/Ekd0ryfjgjt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-