General
-
Target
2024-05-23_2a3a923b95881b33e7ad0099c0e66254_cryptolocker
-
Size
37KB
-
Sample
240523-bryjwagf33
-
MD5
2a3a923b95881b33e7ad0099c0e66254
-
SHA1
c19743ae6766328482ea94271b2f5972119a745d
-
SHA256
b8ce6fe5ef5ef1f11abc8e279d576c135f1bbe3da7a506d1cd53f834f8ad2e61
-
SHA512
7f3d600901f739f61cb6b561edce9c2d4849cd5e71c8930baccae9abbbd4c13d02af2967bfe9b283329e88a11d9f3ed5a49989e328fe27da052e04240fd69455
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDIm:bAvJCF+RQgJeab4sbD
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_2a3a923b95881b33e7ad0099c0e66254_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_2a3a923b95881b33e7ad0099c0e66254_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_2a3a923b95881b33e7ad0099c0e66254_cryptolocker
-
Size
37KB
-
MD5
2a3a923b95881b33e7ad0099c0e66254
-
SHA1
c19743ae6766328482ea94271b2f5972119a745d
-
SHA256
b8ce6fe5ef5ef1f11abc8e279d576c135f1bbe3da7a506d1cd53f834f8ad2e61
-
SHA512
7f3d600901f739f61cb6b561edce9c2d4849cd5e71c8930baccae9abbbd4c13d02af2967bfe9b283329e88a11d9f3ed5a49989e328fe27da052e04240fd69455
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDIm:bAvJCF+RQgJeab4sbD
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-