General
-
Target
2024-06-04_a5b7f2ad89718f74bc5e3984b09e98d7_cryptolocker
-
Size
42KB
-
Sample
240604-fh9b8sec83
-
MD5
a5b7f2ad89718f74bc5e3984b09e98d7
-
SHA1
f6018cb85ce86ffd27f0a2488fb4c9f9c0da55e1
-
SHA256
80f0a561922342d5b77bd6ff2486d41a8441864b71323a40323488035df13aa8
-
SHA512
06c9decaa01f864d6cbeccc0d6f44d6bfca204fc0f532b558bb10388d6d39910c25c6c5c24e6479344aa9bfaa748d287e3d59fcf79ba7cb4be7d56406986f6cf
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqJ:bCDOw9aMDooc+vAqJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_a5b7f2ad89718f74bc5e3984b09e98d7_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-04_a5b7f2ad89718f74bc5e3984b09e98d7_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-04_a5b7f2ad89718f74bc5e3984b09e98d7_cryptolocker
-
Size
42KB
-
MD5
a5b7f2ad89718f74bc5e3984b09e98d7
-
SHA1
f6018cb85ce86ffd27f0a2488fb4c9f9c0da55e1
-
SHA256
80f0a561922342d5b77bd6ff2486d41a8441864b71323a40323488035df13aa8
-
SHA512
06c9decaa01f864d6cbeccc0d6f44d6bfca204fc0f532b558bb10388d6d39910c25c6c5c24e6479344aa9bfaa748d287e3d59fcf79ba7cb4be7d56406986f6cf
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqJ:bCDOw9aMDooc+vAqJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-