General
-
Target
2024-05-27_8503a1c725664fea83441213b31af08c_cryptolocker
-
Size
34KB
-
Sample
240527-fbj4rshe69
-
MD5
8503a1c725664fea83441213b31af08c
-
SHA1
4ac76af8ba90d0dfa73401e9dd1e23df6ef3a809
-
SHA256
7a03026f7a131b0f63e701bc4286739c6d67ded90f1d91256cd6e26748e49961
-
SHA512
31276c5d610a9815de2de9dbf50337a30e410a6b4474504362728803fbf4e92936e0b82745e5501981b10aeabda1d6915fd470f446adf2fe036555cee72e23da
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmp:bxNrC7kYo1Fxf2rYPk
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_8503a1c725664fea83441213b31af08c_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-27_8503a1c725664fea83441213b31af08c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-27_8503a1c725664fea83441213b31af08c_cryptolocker
-
Size
34KB
-
MD5
8503a1c725664fea83441213b31af08c
-
SHA1
4ac76af8ba90d0dfa73401e9dd1e23df6ef3a809
-
SHA256
7a03026f7a131b0f63e701bc4286739c6d67ded90f1d91256cd6e26748e49961
-
SHA512
31276c5d610a9815de2de9dbf50337a30e410a6b4474504362728803fbf4e92936e0b82745e5501981b10aeabda1d6915fd470f446adf2fe036555cee72e23da
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmp:bxNrC7kYo1Fxf2rYPk
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-