General
-
Target
2024-06-01_26c88534e3bc028f949378425e179fe2_cryptolocker
-
Size
37KB
-
Sample
240601-s7btgsge66
-
MD5
26c88534e3bc028f949378425e179fe2
-
SHA1
e53ad3b9eaae1650ab5c763841ead48195965eb1
-
SHA256
f66ae50dcd251e0b8f60c42ebfd9cb485220f07d016ec99b779786e715da8deb
-
SHA512
ca083cfb6ad5565c330925d7dc51a51c9a30094e14cd8f81d0f135efead2bc38a2b2a1de9dae1384f4994ec5bba30e578616cfecd74174e9e790534508b5b197
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qvoLUZ61VSl3x:btB9g/WItCSsAGjX7r3BTmUQ1Vmx
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_26c88534e3bc028f949378425e179fe2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_26c88534e3bc028f949378425e179fe2_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-01_26c88534e3bc028f949378425e179fe2_cryptolocker
-
Size
37KB
-
MD5
26c88534e3bc028f949378425e179fe2
-
SHA1
e53ad3b9eaae1650ab5c763841ead48195965eb1
-
SHA256
f66ae50dcd251e0b8f60c42ebfd9cb485220f07d016ec99b779786e715da8deb
-
SHA512
ca083cfb6ad5565c330925d7dc51a51c9a30094e14cd8f81d0f135efead2bc38a2b2a1de9dae1384f4994ec5bba30e578616cfecd74174e9e790534508b5b197
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qvoLUZ61VSl3x:btB9g/WItCSsAGjX7r3BTmUQ1Vmx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-