General
-
Target
2024-05-23_b3ac5f80f570705f61928e57f7d6b867_cryptolocker
-
Size
390KB
-
Sample
240523-sc86hafb21
-
MD5
b3ac5f80f570705f61928e57f7d6b867
-
SHA1
b46532af0c552617fbd9c74d9f7c73c672c2ad6e
-
SHA256
e1f7cb1103cc89d96acaa8dc1a10ad1d9e0b9978399949a3027ef4dc7ae667f5
-
SHA512
7da5105c3322a7d82b0471366d3bae505ca671e5e5a516f976177d8437e99ad5d1a512a82b3f8d25bc3c5382b4a18ac94e2e7c345d62118774a2bf0836c63a95
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXc:nnOflT/ZFIjBz3xjTxynGUOUhXc
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_b3ac5f80f570705f61928e57f7d6b867_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_b3ac5f80f570705f61928e57f7d6b867_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_b3ac5f80f570705f61928e57f7d6b867_cryptolocker
-
Size
390KB
-
MD5
b3ac5f80f570705f61928e57f7d6b867
-
SHA1
b46532af0c552617fbd9c74d9f7c73c672c2ad6e
-
SHA256
e1f7cb1103cc89d96acaa8dc1a10ad1d9e0b9978399949a3027ef4dc7ae667f5
-
SHA512
7da5105c3322a7d82b0471366d3bae505ca671e5e5a516f976177d8437e99ad5d1a512a82b3f8d25bc3c5382b4a18ac94e2e7c345d62118774a2bf0836c63a95
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXc:nnOflT/ZFIjBz3xjTxynGUOUhXc
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-