General
-
Target
2024-05-22_fa1b263b2ef64164e1d80f4427b9329d_cryptolocker
-
Size
40KB
-
Sample
240522-g2ga8seg23
-
MD5
fa1b263b2ef64164e1d80f4427b9329d
-
SHA1
c83a526a4a458852eadb3d38db7fc2a537118200
-
SHA256
a8c99e6b9337a34ea9411bb522dc0cc5f77c8906d4cb1b8b5ec3652ff6e0b658
-
SHA512
a79a2097ceabd1470c5011d62d0b22c652601090b0069ffb9e5d655dde73b83db5243b04bc8e335501173cd6579f2488bd0f6119995bb93e1dbdf05ed82e1922
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4Hmp:bA6YcA/X6G0W1BGp
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_fa1b263b2ef64164e1d80f4427b9329d_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-22_fa1b263b2ef64164e1d80f4427b9329d_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_fa1b263b2ef64164e1d80f4427b9329d_cryptolocker
-
Size
40KB
-
MD5
fa1b263b2ef64164e1d80f4427b9329d
-
SHA1
c83a526a4a458852eadb3d38db7fc2a537118200
-
SHA256
a8c99e6b9337a34ea9411bb522dc0cc5f77c8906d4cb1b8b5ec3652ff6e0b658
-
SHA512
a79a2097ceabd1470c5011d62d0b22c652601090b0069ffb9e5d655dde73b83db5243b04bc8e335501173cd6579f2488bd0f6119995bb93e1dbdf05ed82e1922
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4Hmp:bA6YcA/X6G0W1BGp
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-