General
-
Target
2024-06-04_a50a8cc9506f83afbb3802f7ef6bb2a9_cryptolocker
-
Size
62KB
-
Sample
240604-fh5ztaec78
-
MD5
a50a8cc9506f83afbb3802f7ef6bb2a9
-
SHA1
24b1195769e5b85cadd2a8deebe94d9a63eaab5c
-
SHA256
a851342dadfe559b68eb44d2e7aa40b1ad1f2dce0414ccaff0c7f1b4b7dbd1a1
-
SHA512
9c08fb43304b5c33ee068afb2c1df6f8664de1af9a2e545a817036a205a4259fe48b4a432717d9ccbe276e73b21290546fcf2d9b16937c5ed229141a2fcf65a4
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnxs:btng54SMLr+/AO/kIhfoKMHda2
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_a50a8cc9506f83afbb3802f7ef6bb2a9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-04_a50a8cc9506f83afbb3802f7ef6bb2a9_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-04_a50a8cc9506f83afbb3802f7ef6bb2a9_cryptolocker
-
Size
62KB
-
MD5
a50a8cc9506f83afbb3802f7ef6bb2a9
-
SHA1
24b1195769e5b85cadd2a8deebe94d9a63eaab5c
-
SHA256
a851342dadfe559b68eb44d2e7aa40b1ad1f2dce0414ccaff0c7f1b4b7dbd1a1
-
SHA512
9c08fb43304b5c33ee068afb2c1df6f8664de1af9a2e545a817036a205a4259fe48b4a432717d9ccbe276e73b21290546fcf2d9b16937c5ed229141a2fcf65a4
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnxs:btng54SMLr+/AO/kIhfoKMHda2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-