General
-
Target
2024-06-02_a5c2773b07129101c436f50006fb376e_cryptolocker
-
Size
42KB
-
Sample
240602-kbt17aga8z
-
MD5
a5c2773b07129101c436f50006fb376e
-
SHA1
fc8c864d39f29970441424bd448af047482db900
-
SHA256
ee7313b5878699219627905ff12566439ca864b7c6a933ed0b1b573935c445da
-
SHA512
3699e3ae5992c2ac8df3eb573d70067d19410f66d2cf852c48054d1b425a87e1f5bc8ac122b526b650dba584219370ac0c65d7169c20a9698cd4f668b1081c54
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAC:bCDOw9aMDooc+vAqAC
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_a5c2773b07129101c436f50006fb376e_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-02_a5c2773b07129101c436f50006fb376e_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_a5c2773b07129101c436f50006fb376e_cryptolocker
-
Size
42KB
-
MD5
a5c2773b07129101c436f50006fb376e
-
SHA1
fc8c864d39f29970441424bd448af047482db900
-
SHA256
ee7313b5878699219627905ff12566439ca864b7c6a933ed0b1b573935c445da
-
SHA512
3699e3ae5992c2ac8df3eb573d70067d19410f66d2cf852c48054d1b425a87e1f5bc8ac122b526b650dba584219370ac0c65d7169c20a9698cd4f668b1081c54
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAC:bCDOw9aMDooc+vAqAC
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-