General
-
Target
2024-05-23_54aec116110b375002779cfa58c44d1e_cryptolocker
-
Size
85KB
-
Sample
240523-a326rsfb8s
-
MD5
54aec116110b375002779cfa58c44d1e
-
SHA1
6693fd3266bda271cdf3f5feaa20a3e27400cd57
-
SHA256
07d608a8bdf091db35873fe6f3b06d483db2d3fe87d4794407e2f62d5523a690
-
SHA512
1b43f7c529995fb9f450e4e708e887a277370827ca81f0fe8c6a8b84abf39022291eed80869382c67961ab57095f589d5d791365193d56910a96ba49236fce63
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+c:TCjsIOtEvwDpj5HE/OUHnSMW
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_54aec116110b375002779cfa58c44d1e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_54aec116110b375002779cfa58c44d1e_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_54aec116110b375002779cfa58c44d1e_cryptolocker
-
Size
85KB
-
MD5
54aec116110b375002779cfa58c44d1e
-
SHA1
6693fd3266bda271cdf3f5feaa20a3e27400cd57
-
SHA256
07d608a8bdf091db35873fe6f3b06d483db2d3fe87d4794407e2f62d5523a690
-
SHA512
1b43f7c529995fb9f450e4e708e887a277370827ca81f0fe8c6a8b84abf39022291eed80869382c67961ab57095f589d5d791365193d56910a96ba49236fce63
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+c:TCjsIOtEvwDpj5HE/OUHnSMW
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-