General
-
Target
2024-05-23_536e8f3632d339485ade8733fe226d73_cryptolocker
-
Size
36KB
-
Sample
240523-cyynwsag92
-
MD5
536e8f3632d339485ade8733fe226d73
-
SHA1
d35fec64cf966104de8fb5a31c3fc213e14d9f46
-
SHA256
ac912ee75ba81ac462da0e8e98b197027622a7349e4d7ff1e98effc3ae0a6b7b
-
SHA512
953944c158dbc605bcf16304d27101b7dcf59ce9fdc3063fd90591d16d668da3e4c38f01e317669b75641efa5a66f67cd54a9c557380c3bce78c06097a8460c4
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx1h+:bA74zYcgT/Ekd0ryfjPIunqpeNswm6i
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_536e8f3632d339485ade8733fe226d73_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-23_536e8f3632d339485ade8733fe226d73_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_536e8f3632d339485ade8733fe226d73_cryptolocker
-
Size
36KB
-
MD5
536e8f3632d339485ade8733fe226d73
-
SHA1
d35fec64cf966104de8fb5a31c3fc213e14d9f46
-
SHA256
ac912ee75ba81ac462da0e8e98b197027622a7349e4d7ff1e98effc3ae0a6b7b
-
SHA512
953944c158dbc605bcf16304d27101b7dcf59ce9fdc3063fd90591d16d668da3e4c38f01e317669b75641efa5a66f67cd54a9c557380c3bce78c06097a8460c4
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx1h+:bA74zYcgT/Ekd0ryfjPIunqpeNswm6i
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-