General
-
Target
2024-05-25_65dadadb8ad6f4817eca90dcb827c8ac_cryptolocker
-
Size
43KB
-
Sample
240525-a1rl9age2y
-
MD5
65dadadb8ad6f4817eca90dcb827c8ac
-
SHA1
dc3f4469e90c68566a8d1962e65e67bb89b74566
-
SHA256
bd11954004f55f07e910931d0e94503d033789244b7496b90204196d7b9a65ac
-
SHA512
ab7c1c193809df9dbb5da5302feb86d068a657d6f42656e2318244938c6e079d525ccdc3a55b60909003ea3ae6e464857e68d2b4a200b8fc3d04ae28d15ed312
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3fz:bIDOw9a0Dwo3P1ojvUSD79RL
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-25_65dadadb8ad6f4817eca90dcb827c8ac_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-25_65dadadb8ad6f4817eca90dcb827c8ac_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-25_65dadadb8ad6f4817eca90dcb827c8ac_cryptolocker
-
Size
43KB
-
MD5
65dadadb8ad6f4817eca90dcb827c8ac
-
SHA1
dc3f4469e90c68566a8d1962e65e67bb89b74566
-
SHA256
bd11954004f55f07e910931d0e94503d033789244b7496b90204196d7b9a65ac
-
SHA512
ab7c1c193809df9dbb5da5302feb86d068a657d6f42656e2318244938c6e079d525ccdc3a55b60909003ea3ae6e464857e68d2b4a200b8fc3d04ae28d15ed312
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3fz:bIDOw9a0Dwo3P1ojvUSD79RL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-