General
-
Target
2024-05-23_48db9084a6a3af3cf656451b4eea5f6a_cryptolocker
-
Size
31KB
-
Sample
240523-awxmpsfa96
-
MD5
48db9084a6a3af3cf656451b4eea5f6a
-
SHA1
8417ca58f51a9d09be94dd6fdd05de2d5d0d693a
-
SHA256
1fdfd401e07786b38a27180183657efa27618206167235b7471c6c545c875f77
-
SHA512
fb2b6e1a159ea5f7474d9a16bd8148ed26b27a04c6ae593eb75e6b0dc64c89828770c5ac71aef7992071cf0605150cf3b748d7669e107851f8a8f071ea81e66f
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+U8Ss87vhl:b/yC4GyNM01GuQMNXum+NSnl
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_48db9084a6a3af3cf656451b4eea5f6a_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-23_48db9084a6a3af3cf656451b4eea5f6a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-23_48db9084a6a3af3cf656451b4eea5f6a_cryptolocker
-
Size
31KB
-
MD5
48db9084a6a3af3cf656451b4eea5f6a
-
SHA1
8417ca58f51a9d09be94dd6fdd05de2d5d0d693a
-
SHA256
1fdfd401e07786b38a27180183657efa27618206167235b7471c6c545c875f77
-
SHA512
fb2b6e1a159ea5f7474d9a16bd8148ed26b27a04c6ae593eb75e6b0dc64c89828770c5ac71aef7992071cf0605150cf3b748d7669e107851f8a8f071ea81e66f
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+U8Ss87vhl:b/yC4GyNM01GuQMNXum+NSnl
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-