General
-
Target
2024-05-23_8db3dc24e32d1351f415aeac88a9223f_cryptolocker
-
Size
37KB
-
Sample
240523-bvs4kage9s
-
MD5
8db3dc24e32d1351f415aeac88a9223f
-
SHA1
c9ef43ca14b88a44516bd9b0ed0b470d0390dbe3
-
SHA256
fcbbc67d9cc1fc8ce15c6de95f0cf3d5e0f260b14e1bbcb190c0fb56751b1d3e
-
SHA512
3bd2c5d04b49333723cf55ea74750f3928d635b411583bc10f4abd5f79f146fadfa1e3b15418e61e3c22807c405f54118a37f68be8a45d95429646cec832e992
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDIC:bAvJCF+RQgJeab4sbX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_8db3dc24e32d1351f415aeac88a9223f_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-23_8db3dc24e32d1351f415aeac88a9223f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_8db3dc24e32d1351f415aeac88a9223f_cryptolocker
-
Size
37KB
-
MD5
8db3dc24e32d1351f415aeac88a9223f
-
SHA1
c9ef43ca14b88a44516bd9b0ed0b470d0390dbe3
-
SHA256
fcbbc67d9cc1fc8ce15c6de95f0cf3d5e0f260b14e1bbcb190c0fb56751b1d3e
-
SHA512
3bd2c5d04b49333723cf55ea74750f3928d635b411583bc10f4abd5f79f146fadfa1e3b15418e61e3c22807c405f54118a37f68be8a45d95429646cec832e992
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDIC:bAvJCF+RQgJeab4sbX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-