General
-
Target
2024-05-22_4767d148c50ce5dc2128de58be472216_cryptolocker
-
Size
38KB
-
Sample
240522-czq1fahf7t
-
MD5
4767d148c50ce5dc2128de58be472216
-
SHA1
2bb37a5900ac12b90d8575b327a9453e3ace25e7
-
SHA256
674697e9ac25fdc92945598f6069806bc2938d4d0efe3aec8de13b7d705ffacf
-
SHA512
d483b832094a500a53a9b68556eb7c832661fdbc6531ddcac8a148845bf22f3b8daf1e61f019a44471870e16832aea22b67b6ce2f09aafb69cbd3f4dbfc96570
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mG:bc/y2lLRU6zA6qG
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_4767d148c50ce5dc2128de58be472216_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-22_4767d148c50ce5dc2128de58be472216_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_4767d148c50ce5dc2128de58be472216_cryptolocker
-
Size
38KB
-
MD5
4767d148c50ce5dc2128de58be472216
-
SHA1
2bb37a5900ac12b90d8575b327a9453e3ace25e7
-
SHA256
674697e9ac25fdc92945598f6069806bc2938d4d0efe3aec8de13b7d705ffacf
-
SHA512
d483b832094a500a53a9b68556eb7c832661fdbc6531ddcac8a148845bf22f3b8daf1e61f019a44471870e16832aea22b67b6ce2f09aafb69cbd3f4dbfc96570
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mG:bc/y2lLRU6zA6qG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-