General
-
Target
2024-05-22_a6aa9a8414e644384e0357d8653d3fc5_cryptolocker
-
Size
73KB
-
Sample
240522-sbmacafb45
-
MD5
a6aa9a8414e644384e0357d8653d3fc5
-
SHA1
617a4ad121487bdbb59c540b5fcf8fccd93d33cb
-
SHA256
7ebc25e6f044f00839b0174cbb4fcd0269e5054710a14f1202ace64cfdf564f3
-
SHA512
3cd942afb4bd455c0e23d748bb566639dd8ff68c04c9ed921d521072146a0d99e60c5247c30de87a991b23e62718da995a0bece70d54c1c72480363651b8554d
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsU:u6QFElP6n+gWMOtEvwDpjJGYQbU
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_a6aa9a8414e644384e0357d8653d3fc5_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-22_a6aa9a8414e644384e0357d8653d3fc5_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_a6aa9a8414e644384e0357d8653d3fc5_cryptolocker
-
Size
73KB
-
MD5
a6aa9a8414e644384e0357d8653d3fc5
-
SHA1
617a4ad121487bdbb59c540b5fcf8fccd93d33cb
-
SHA256
7ebc25e6f044f00839b0174cbb4fcd0269e5054710a14f1202ace64cfdf564f3
-
SHA512
3cd942afb4bd455c0e23d748bb566639dd8ff68c04c9ed921d521072146a0d99e60c5247c30de87a991b23e62718da995a0bece70d54c1c72480363651b8554d
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsU:u6QFElP6n+gWMOtEvwDpjJGYQbU
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-