General
-
Target
2024-05-23_d046faa6f501ea545a031be69c2e8623_cryptolocker
-
Size
43KB
-
Sample
240523-f783rsfc6v
-
MD5
d046faa6f501ea545a031be69c2e8623
-
SHA1
36d0e90e3053c574452e6dfce7afa08fae4a8475
-
SHA256
a9f214669400657cf4e795488a8bfb5b70a3fb82eaefe709082cc47860b30005
-
SHA512
5511c417fd095626b245d2dc246b134aefd5ccead144f3a9cc6403e68d262d6f3cf932f0986800643308fb7cb009497ce84f3ca0ed0bf121e789f230729a0d6f
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydC:bCDOw9aMDooc+vAy0
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_d046faa6f501ea545a031be69c2e8623_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-23_d046faa6f501ea545a031be69c2e8623_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_d046faa6f501ea545a031be69c2e8623_cryptolocker
-
Size
43KB
-
MD5
d046faa6f501ea545a031be69c2e8623
-
SHA1
36d0e90e3053c574452e6dfce7afa08fae4a8475
-
SHA256
a9f214669400657cf4e795488a8bfb5b70a3fb82eaefe709082cc47860b30005
-
SHA512
5511c417fd095626b245d2dc246b134aefd5ccead144f3a9cc6403e68d262d6f3cf932f0986800643308fb7cb009497ce84f3ca0ed0bf121e789f230729a0d6f
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydC:bCDOw9aMDooc+vAy0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-