General
-
Target
2024-05-28_8a1364dfd714109df84cfdd5c2e07b41_cryptolocker
-
Size
35KB
-
Sample
240528-b3k3xsbb63
-
MD5
8a1364dfd714109df84cfdd5c2e07b41
-
SHA1
a72787d9213f58f49a615f6e837a401a09c84315
-
SHA256
abdd908a7e0b31e142a73b3933aade46e7d4ce941a6775d98bffe928baf0a7fc
-
SHA512
621cf06ca8bf35ef0571cbc1f7c3cc8c1caf13696621d32c77e0b61a2dcf99e230b732ef544d9f9dd1f9b41d9b75f0bc7fa339f92f79bdd6d6d00990f5002801
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9gxrOX:bAvJCYOOvbRPDEgXRcuM9gxiX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_8a1364dfd714109df84cfdd5c2e07b41_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-28_8a1364dfd714109df84cfdd5c2e07b41_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-28_8a1364dfd714109df84cfdd5c2e07b41_cryptolocker
-
Size
35KB
-
MD5
8a1364dfd714109df84cfdd5c2e07b41
-
SHA1
a72787d9213f58f49a615f6e837a401a09c84315
-
SHA256
abdd908a7e0b31e142a73b3933aade46e7d4ce941a6775d98bffe928baf0a7fc
-
SHA512
621cf06ca8bf35ef0571cbc1f7c3cc8c1caf13696621d32c77e0b61a2dcf99e230b732ef544d9f9dd1f9b41d9b75f0bc7fa339f92f79bdd6d6d00990f5002801
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM9gxrOX:bAvJCYOOvbRPDEgXRcuM9gxiX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-