General
- Target 2024-06-12_b4a168966711f5ff4599e2fe1356a246_cryptolocker
- Size 31KB
- Sample240612-3lctrsyfqj
- SHA256 99dd5d4219dcaa104a464d597a071131fe0ae12dfeaeff982370b947e6698b39
- MD5 b4a168966711f5ff4599e2fe1356a246
- SHA1 42da4f4957317ec936b64afa569d94d5d0cbfbeb
- SHA512 661a131a32955419cbe0bfc32b57f5652ba4690223adf47b8063aa1e8ec67951f4feffda085d4e6600f21f5f3f64eda5fa3eb9ccd3dd2b8c556dc863aaaaacd9
- SSDEEP 384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdD:bAvJCYOOvbRPDEgXRcJh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2024-06-12_b4a168966711f5ff4599e2fe1356a246_cryptolocker.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-12_b4a168966711f5ff4599e2fe1356a246_cryptolocker.exe
Resource
win10v2004-20240611-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-12_b4a168966711f5ff4599e2fe1356a246_cryptolocker
- Size 31KB
- SHA256 99dd5d4219dcaa104a464d597a071131fe0ae12dfeaeff982370b947e6698b39
- MD5 b4a168966711f5ff4599e2fe1356a246
- SHA1 42da4f4957317ec936b64afa569d94d5d0cbfbeb
- SHA512 661a131a32955419cbe0bfc32b57f5652ba4690223adf47b8063aa1e8ec67951f4feffda085d4e6600f21f5f3f64eda5fa3eb9ccd3dd2b8c556dc863aaaaacd9
- SSDEEP 384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3vdD:bAvJCYOOvbRPDEgXRcJh
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL