General
-
Target
2024-06-04_5a320fa50e03c659fa0ae5319b55c96d_cryptolocker
-
Size
44KB
-
Sample
240604-v16fmaee88
-
MD5
5a320fa50e03c659fa0ae5319b55c96d
-
SHA1
539e9050c7c40086e9b904772a33d18e1a281fa0
-
SHA256
e803f0d950be2d4b2520b28af50005b9f43305b7a28a92edb4f3ae1dd914c56e
-
SHA512
a204a43468ef168c36ffa787d8b17d52b57488b5771fe18691561de00079158e1b7f7f8a900685fbf59ad516b893e46e3efafe384810a508c6caddad9ccf3347
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHtJ:bCDOw9aMDooc+vANJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_5a320fa50e03c659fa0ae5319b55c96d_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-04_5a320fa50e03c659fa0ae5319b55c96d_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-04_5a320fa50e03c659fa0ae5319b55c96d_cryptolocker
-
Size
44KB
-
MD5
5a320fa50e03c659fa0ae5319b55c96d
-
SHA1
539e9050c7c40086e9b904772a33d18e1a281fa0
-
SHA256
e803f0d950be2d4b2520b28af50005b9f43305b7a28a92edb4f3ae1dd914c56e
-
SHA512
a204a43468ef168c36ffa787d8b17d52b57488b5771fe18691561de00079158e1b7f7f8a900685fbf59ad516b893e46e3efafe384810a508c6caddad9ccf3347
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHtJ:bCDOw9aMDooc+vANJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-