General
-
Target
2024-05-22_8d6c3bc3487d0f4dedc1c09af03e2903_cryptolocker
-
Size
77KB
-
Sample
240522-cd19aagh61
-
MD5
8d6c3bc3487d0f4dedc1c09af03e2903
-
SHA1
9a03152df5f4daa3927e3764b69071e6f62f0033
-
SHA256
8fe28c8631e7e0568b602707c512595e52fdb1fc554263de1b9d21dad4eba6b4
-
SHA512
ac78dee7a15fbb115aa9fde8c3829f09cdd926a8f105865dd9f6b7a21d18d39d1ee12ea508a32611875c7afa072838723e04cf89c2eeee8e7791d52c476ad618
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLk4:X6a+SOtEvwDpjBZYvQd2v
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_8d6c3bc3487d0f4dedc1c09af03e2903_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-22_8d6c3bc3487d0f4dedc1c09af03e2903_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_8d6c3bc3487d0f4dedc1c09af03e2903_cryptolocker
-
Size
77KB
-
MD5
8d6c3bc3487d0f4dedc1c09af03e2903
-
SHA1
9a03152df5f4daa3927e3764b69071e6f62f0033
-
SHA256
8fe28c8631e7e0568b602707c512595e52fdb1fc554263de1b9d21dad4eba6b4
-
SHA512
ac78dee7a15fbb115aa9fde8c3829f09cdd926a8f105865dd9f6b7a21d18d39d1ee12ea508a32611875c7afa072838723e04cf89c2eeee8e7791d52c476ad618
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLk4:X6a+SOtEvwDpjBZYvQd2v
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-