General
-
Target
2024-05-29_a92955fb935bcf2cd4904076365fcf90_cryptolocker
-
Size
43KB
-
Sample
240529-s42kqsbe45
-
MD5
a92955fb935bcf2cd4904076365fcf90
-
SHA1
f88c437589b46718de2c77ea3585dfc0cfe23c26
-
SHA256
36c43c30f648b241015d7bed9ec3ab55f1d04a31d39420796dc1dc9b6879a07d
-
SHA512
a08821ec7f16df86ba18cc0c6256e35fcd1ae01f07db6db091b6572fa53806cee015be6557fa49064ad5074d52d9c79237fb6feff53615a6d298ca3e4a45a70e
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHLI:bCDOw9aMDooc+vArI
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_a92955fb935bcf2cd4904076365fcf90_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-29_a92955fb935bcf2cd4904076365fcf90_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-29_a92955fb935bcf2cd4904076365fcf90_cryptolocker
-
Size
43KB
-
MD5
a92955fb935bcf2cd4904076365fcf90
-
SHA1
f88c437589b46718de2c77ea3585dfc0cfe23c26
-
SHA256
36c43c30f648b241015d7bed9ec3ab55f1d04a31d39420796dc1dc9b6879a07d
-
SHA512
a08821ec7f16df86ba18cc0c6256e35fcd1ae01f07db6db091b6572fa53806cee015be6557fa49064ad5074d52d9c79237fb6feff53615a6d298ca3e4a45a70e
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHLI:bCDOw9aMDooc+vArI
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-