General
-
Target
2024-05-28_bdd06573e6f51bb60d9e195ca1f4975f_cryptolocker
-
Size
42KB
-
Sample
240528-bacwvahf57
-
MD5
bdd06573e6f51bb60d9e195ca1f4975f
-
SHA1
0214c8d31b7ff8598f92a31ef341029d96b5c4a2
-
SHA256
9a13809dfc8b7f3d8d7c6edae76527aaa38aedeb902c5b7b15a3682aad98563c
-
SHA512
572158019b959e16ff1f679b7b6d7140a600555bff50bb92c5cf190a1259382f3452d14741277d179a2c29cc3cb91e87f3c6dab9177f1e1156eee951a633010c
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAd3j:bCDOw9aMDooc+vAR
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_bdd06573e6f51bb60d9e195ca1f4975f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-28_bdd06573e6f51bb60d9e195ca1f4975f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-28_bdd06573e6f51bb60d9e195ca1f4975f_cryptolocker
-
Size
42KB
-
MD5
bdd06573e6f51bb60d9e195ca1f4975f
-
SHA1
0214c8d31b7ff8598f92a31ef341029d96b5c4a2
-
SHA256
9a13809dfc8b7f3d8d7c6edae76527aaa38aedeb902c5b7b15a3682aad98563c
-
SHA512
572158019b959e16ff1f679b7b6d7140a600555bff50bb92c5cf190a1259382f3452d14741277d179a2c29cc3cb91e87f3c6dab9177f1e1156eee951a633010c
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAd3j:bCDOw9aMDooc+vAR
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-