General
-
Target
2024-05-29_a86c0678d04e470fbc25702d9a6c3d9b_cryptolocker
-
Size
31KB
-
Sample
240529-1f72lsbe25
-
MD5
a86c0678d04e470fbc25702d9a6c3d9b
-
SHA1
85494c009af8de658c0d0c4f6fb0d36b1590a429
-
SHA256
3baffc3a2e84bb92ff02f231050020c75649c95e18b39865de373eb1fca63c73
-
SHA512
693c81a80b90437dcefb9de8e683c3f6ea37421b4048854068b5106ec69e298e571ea8793073c3dca2f96621b3cdad58521289a26805bb3f3ac1334f01299a7f
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf3:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XG
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_a86c0678d04e470fbc25702d9a6c3d9b_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-29_a86c0678d04e470fbc25702d9a6c3d9b_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-29_a86c0678d04e470fbc25702d9a6c3d9b_cryptolocker
-
Size
31KB
-
MD5
a86c0678d04e470fbc25702d9a6c3d9b
-
SHA1
85494c009af8de658c0d0c4f6fb0d36b1590a429
-
SHA256
3baffc3a2e84bb92ff02f231050020c75649c95e18b39865de373eb1fca63c73
-
SHA512
693c81a80b90437dcefb9de8e683c3f6ea37421b4048854068b5106ec69e298e571ea8793073c3dca2f96621b3cdad58521289a26805bb3f3ac1334f01299a7f
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf3:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-