General
-
Target
2024-05-24_0c461b7d4beb13e60ea75ce234aecc74_cryptolocker
-
Size
43KB
-
Sample
240524-2apthsdb7s
-
MD5
0c461b7d4beb13e60ea75ce234aecc74
-
SHA1
0a1fc2a5fef5f4b47ce95a79390f9b910c26765b
-
SHA256
fc0d812e470236a5f650167a9ad8d6bef9f9ebd8e6ae4aab849666ecc15aba0a
-
SHA512
9fd7e66d13326cfb772e2f9dcfbbee39815d50669874124b475a0376247a89d7b28eaf948615e44598b70d362bec1443b1c09b86e812093863b4030864d48f58
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA6:b/pYayGig5HjS3NPA6
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_0c461b7d4beb13e60ea75ce234aecc74_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-24_0c461b7d4beb13e60ea75ce234aecc74_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-24_0c461b7d4beb13e60ea75ce234aecc74_cryptolocker
-
Size
43KB
-
MD5
0c461b7d4beb13e60ea75ce234aecc74
-
SHA1
0a1fc2a5fef5f4b47ce95a79390f9b910c26765b
-
SHA256
fc0d812e470236a5f650167a9ad8d6bef9f9ebd8e6ae4aab849666ecc15aba0a
-
SHA512
9fd7e66d13326cfb772e2f9dcfbbee39815d50669874124b475a0376247a89d7b28eaf948615e44598b70d362bec1443b1c09b86e812093863b4030864d48f58
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA6:b/pYayGig5HjS3NPA6
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-