General
-
Target
2024-06-27_49086996702f2ca8e53366c28fc46e65_cryptolocker
-
Size
46KB
-
Sample
240627-st6rpsxeqd
-
MD5
49086996702f2ca8e53366c28fc46e65
-
SHA1
2173fca9b65fd39aa9b5f015e3fd289d08ede2fa
-
SHA256
a5fd5304d927cde8adc8ec80d3d87bef2cd8639d557a0f6520dcad0d48260acd
-
SHA512
3f19c2d6c14ded6b11763e46bbc63248a131fa4e6b634d9130d125e6c155fd89c47fe42754793ce1830486c0fc394b6aa7106b9168db056aba78388a2c89a54f
-
SSDEEP
768:bao/2n1TCraU6GD1a4X1XOQ69zbjlAAX5e9zu:bF/y2lFizbR9Xwzu
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-27_49086996702f2ca8e53366c28fc46e65_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-27_49086996702f2ca8e53366c28fc46e65_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-27_49086996702f2ca8e53366c28fc46e65_cryptolocker
-
Size
46KB
-
MD5
49086996702f2ca8e53366c28fc46e65
-
SHA1
2173fca9b65fd39aa9b5f015e3fd289d08ede2fa
-
SHA256
a5fd5304d927cde8adc8ec80d3d87bef2cd8639d557a0f6520dcad0d48260acd
-
SHA512
3f19c2d6c14ded6b11763e46bbc63248a131fa4e6b634d9130d125e6c155fd89c47fe42754793ce1830486c0fc394b6aa7106b9168db056aba78388a2c89a54f
-
SSDEEP
768:bao/2n1TCraU6GD1a4X1XOQ69zbjlAAX5e9zu:bF/y2lFizbR9Xwzu
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-