General
-
Target
2024-05-22_2eb7a5adeaf06e4cb9856f7c5c0de482_cryptolocker
-
Size
390KB
-
Sample
240522-yvst5aef4z
-
MD5
2eb7a5adeaf06e4cb9856f7c5c0de482
-
SHA1
7b766111702bac06a7c09d8547ea4d615429a0fa
-
SHA256
bc601f4d8f19f11ecab406b3e46606ad5c0aa0b186dfd2486b85651c19924f3b
-
SHA512
9a90ab985bd1215e06d62b659e56a31c1a9f436aca9a2a8281c67c3690db3fdae6da5b4e9bd48fe950803eeabff2fbb127478e92f73307231ea648b078f82bc2
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRT:nnOflT/ZFIjBz3xjTxynGUOUhXRT
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_2eb7a5adeaf06e4cb9856f7c5c0de482_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_2eb7a5adeaf06e4cb9856f7c5c0de482_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-22_2eb7a5adeaf06e4cb9856f7c5c0de482_cryptolocker
-
Size
390KB
-
MD5
2eb7a5adeaf06e4cb9856f7c5c0de482
-
SHA1
7b766111702bac06a7c09d8547ea4d615429a0fa
-
SHA256
bc601f4d8f19f11ecab406b3e46606ad5c0aa0b186dfd2486b85651c19924f3b
-
SHA512
9a90ab985bd1215e06d62b659e56a31c1a9f436aca9a2a8281c67c3690db3fdae6da5b4e9bd48fe950803eeabff2fbb127478e92f73307231ea648b078f82bc2
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRT:nnOflT/ZFIjBz3xjTxynGUOUhXRT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-