General
-
Target
2024-05-23_f1e5b2025a0aba614bcd0f1fd726d4b6_cryptolocker
-
Size
67KB
-
Sample
240523-yggjyaea34
-
MD5
f1e5b2025a0aba614bcd0f1fd726d4b6
-
SHA1
1cf9920b03a4c0b484b0e20c5804836ea32316a2
-
SHA256
07e772d11e86fa19cdbd24a2208435270231d54bf729235450006210b379b0f6
-
SHA512
864653a9796d44db39e6c8765890ad8ce0c0f1f757ba0f583643564b6bef1fce6ec020c90880f8ad8681de90fcda96f29b0b978418b99630da7e77223c62ce0f
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGyePE:TCjsIOtEvwDpj5HE/OUHnSMYu
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_f1e5b2025a0aba614bcd0f1fd726d4b6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_f1e5b2025a0aba614bcd0f1fd726d4b6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_f1e5b2025a0aba614bcd0f1fd726d4b6_cryptolocker
-
Size
67KB
-
MD5
f1e5b2025a0aba614bcd0f1fd726d4b6
-
SHA1
1cf9920b03a4c0b484b0e20c5804836ea32316a2
-
SHA256
07e772d11e86fa19cdbd24a2208435270231d54bf729235450006210b379b0f6
-
SHA512
864653a9796d44db39e6c8765890ad8ce0c0f1f757ba0f583643564b6bef1fce6ec020c90880f8ad8681de90fcda96f29b0b978418b99630da7e77223c62ce0f
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdfGyePE:TCjsIOtEvwDpj5HE/OUHnSMYu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-