General
-
Target
2024-05-26_113302398121180fd6151af5d90978ed_cryptolocker
-
Size
32KB
-
Sample
240526-cvd53sbe2s
-
MD5
113302398121180fd6151af5d90978ed
-
SHA1
cd905e2ab31263ef34677e41ef5f82c1ebaf1074
-
SHA256
c2f463fd7602e64105fe8e75235192467d3c0b8ad4ae77703162ad681bfec396
-
SHA512
ff5beeedba31dca426e1b32b2a07823d53e28df4da2ccb12b533ae6f4c1803edf8061b0b580ea3669f599f7aed9c3e401ee23d319b0823acaebe4a6cd8421cbb
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7TIa:bAvJCYOOvbRPDEgXRcJr
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_113302398121180fd6151af5d90978ed_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-26_113302398121180fd6151af5d90978ed_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-26_113302398121180fd6151af5d90978ed_cryptolocker
-
Size
32KB
-
MD5
113302398121180fd6151af5d90978ed
-
SHA1
cd905e2ab31263ef34677e41ef5f82c1ebaf1074
-
SHA256
c2f463fd7602e64105fe8e75235192467d3c0b8ad4ae77703162ad681bfec396
-
SHA512
ff5beeedba31dca426e1b32b2a07823d53e28df4da2ccb12b533ae6f4c1803edf8061b0b580ea3669f599f7aed9c3e401ee23d319b0823acaebe4a6cd8421cbb
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7TIa:bAvJCYOOvbRPDEgXRcJr
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-