General
-
Target
2024-05-23_8a5565e3a13ee2e15fdd3e7b2976dbca_cryptolocker
-
Size
54KB
-
Sample
240523-1fqgkahe9t
-
MD5
8a5565e3a13ee2e15fdd3e7b2976dbca
-
SHA1
d65774e4977685af6666230318afdb93328df7c2
-
SHA256
a9bf7842322ced32210038c7265c1cac995ea7221677324a4580fadcddbf9c48
-
SHA512
461bd7d1172eb60f89d02aaae2668180d0987484fd6fa35e4c7f7d0950af920ef8a79aca7f44a9f860886c22ee653ba2b722c10e6b9d11304f0bc88b4c993e21
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6M:bc/y2lm6iH/NLp17zrV9W
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_8a5565e3a13ee2e15fdd3e7b2976dbca_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_8a5565e3a13ee2e15fdd3e7b2976dbca_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_8a5565e3a13ee2e15fdd3e7b2976dbca_cryptolocker
-
Size
54KB
-
MD5
8a5565e3a13ee2e15fdd3e7b2976dbca
-
SHA1
d65774e4977685af6666230318afdb93328df7c2
-
SHA256
a9bf7842322ced32210038c7265c1cac995ea7221677324a4580fadcddbf9c48
-
SHA512
461bd7d1172eb60f89d02aaae2668180d0987484fd6fa35e4c7f7d0950af920ef8a79aca7f44a9f860886c22ee653ba2b722c10e6b9d11304f0bc88b4c993e21
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6M:bc/y2lm6iH/NLp17zrV9W
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-