General
-
Target
2024-05-31_0785e7d249fb9f5bf95bb2501b52adff_cryptolocker
-
Size
34KB
-
Sample
240531-g5xgmaaf58
-
MD5
0785e7d249fb9f5bf95bb2501b52adff
-
SHA1
ab6f74eb331b72646d0bb0e7f42cca5dbbba0e78
-
SHA256
634a3c133adbf5e0760d1d335ebd80709063840c128f271c5922e5865f4c23a6
-
SHA512
369fdce05ebe9dcd758b78adf52fb912db4082fb8139e3a15890149a1a5a86498365f1cc9d8f2221040e9bc1391560f33167f48a1d77dbb9671dfb99b73fd3d7
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmUA:bxNrC7kYo1Fxf2rYPLA
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_0785e7d249fb9f5bf95bb2501b52adff_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-31_0785e7d249fb9f5bf95bb2501b52adff_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-31_0785e7d249fb9f5bf95bb2501b52adff_cryptolocker
-
Size
34KB
-
MD5
0785e7d249fb9f5bf95bb2501b52adff
-
SHA1
ab6f74eb331b72646d0bb0e7f42cca5dbbba0e78
-
SHA256
634a3c133adbf5e0760d1d335ebd80709063840c128f271c5922e5865f4c23a6
-
SHA512
369fdce05ebe9dcd758b78adf52fb912db4082fb8139e3a15890149a1a5a86498365f1cc9d8f2221040e9bc1391560f33167f48a1d77dbb9671dfb99b73fd3d7
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jmUA:bxNrC7kYo1Fxf2rYPLA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-