General
-
Target
2024-03-19_5028110084604d05a108eac1c1d497e7_cryptolocker
-
Size
38KB
-
Sample
240319-ga7zwabh4v
-
MD5
5028110084604d05a108eac1c1d497e7
-
SHA1
3e0d6889b07a61fbbe17ffcabe47b399bc342b35
-
SHA256
a4be201564d871c913abea676bd411469163715364454a15a779fdee1ddb493e
-
SHA512
32a616eb83dd1b71e73e3feac613fad37101dbfe6b5eeefbf762d87ee06671f30f4ad42d6426dc27c960de21f02acc2aa739072de4bad21442eecfa4f7ec365c
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xL:bIDOw9a0Dwo3P1ojvUSD79d
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_5028110084604d05a108eac1c1d497e7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_5028110084604d05a108eac1c1d497e7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_5028110084604d05a108eac1c1d497e7_cryptolocker
-
Size
38KB
-
MD5
5028110084604d05a108eac1c1d497e7
-
SHA1
3e0d6889b07a61fbbe17ffcabe47b399bc342b35
-
SHA256
a4be201564d871c913abea676bd411469163715364454a15a779fdee1ddb493e
-
SHA512
32a616eb83dd1b71e73e3feac613fad37101dbfe6b5eeefbf762d87ee06671f30f4ad42d6426dc27c960de21f02acc2aa739072de4bad21442eecfa4f7ec365c
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xL:bIDOw9a0Dwo3P1ojvUSD79d
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-