General
-
Target
2024-05-22_de90bf6881e363bd2a7c1d2fe5470029_cryptolocker
-
Size
38KB
-
Sample
240522-dcmj6saa47
-
MD5
de90bf6881e363bd2a7c1d2fe5470029
-
SHA1
ce4dc15d613a4e3699623b1ae1b05e7f923d0b39
-
SHA256
bda6fdd48b8bebea80527c0c476acd37fad734df8956ef0820262c1c241414a7
-
SHA512
8486250aea3c65bd08a64df1a08316e30e14fa29251f7038e6ffce009204aa9ff8166a60a36ce11c2a0f1934f6ac8d9ced893da168457678f3727a6dc5b4ecca
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3H:btB9g/WItCSsAGjX7e9N0hunRvX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_de90bf6881e363bd2a7c1d2fe5470029_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_de90bf6881e363bd2a7c1d2fe5470029_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_de90bf6881e363bd2a7c1d2fe5470029_cryptolocker
-
Size
38KB
-
MD5
de90bf6881e363bd2a7c1d2fe5470029
-
SHA1
ce4dc15d613a4e3699623b1ae1b05e7f923d0b39
-
SHA256
bda6fdd48b8bebea80527c0c476acd37fad734df8956ef0820262c1c241414a7
-
SHA512
8486250aea3c65bd08a64df1a08316e30e14fa29251f7038e6ffce009204aa9ff8166a60a36ce11c2a0f1934f6ac8d9ced893da168457678f3727a6dc5b4ecca
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy3H:btB9g/WItCSsAGjX7e9N0hunRvX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-