General
-
Target
2024-05-28_c86d4c923f90c3b6432ef8f31cd32517_cryptolocker
-
Size
86KB
-
Sample
240528-b8lxeabe24
-
MD5
c86d4c923f90c3b6432ef8f31cd32517
-
SHA1
af872eaf647af6b8fb9efc52ed5399391196c315
-
SHA256
4e1b3f08826161420017bf6ddfda34b9e13b58e77cf0c3b674d5536e40f36e7f
-
SHA512
7b902b2d5bb4e9e27be04833e7901e75e60f7dbcf19c4fce63d6e22f05aa6b65736945524b5d76f30e222195c93e1a5003e6426a56fbb12506fcc070c329860c
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBULa:vCjsIOtEvwDpj5H9YvQd2p
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_c86d4c923f90c3b6432ef8f31cd32517_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-28_c86d4c923f90c3b6432ef8f31cd32517_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-28_c86d4c923f90c3b6432ef8f31cd32517_cryptolocker
-
Size
86KB
-
MD5
c86d4c923f90c3b6432ef8f31cd32517
-
SHA1
af872eaf647af6b8fb9efc52ed5399391196c315
-
SHA256
4e1b3f08826161420017bf6ddfda34b9e13b58e77cf0c3b674d5536e40f36e7f
-
SHA512
7b902b2d5bb4e9e27be04833e7901e75e60f7dbcf19c4fce63d6e22f05aa6b65736945524b5d76f30e222195c93e1a5003e6426a56fbb12506fcc070c329860c
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBULa:vCjsIOtEvwDpj5H9YvQd2p
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-