General
-
Target
2024-03-25_f32560df8435ec60a5844546e1c77f53_cryptolocker
-
Size
50KB
-
Sample
240325-2wm7tadc8w
-
MD5
f32560df8435ec60a5844546e1c77f53
-
SHA1
b1d1e36b4d578a6055198761a85ef8068cc8d8a8
-
SHA256
96f0f1946a1652b087cede0ae386f4ed9b12c1cdafbcdb1be389d737f07483b1
-
SHA512
594c909bdce9512563d9283e2200a3100903ed60917fc6357e36eda59b007e5dce6e3319e5eebabfe9b22c226aa558a07f6f0f6f676f24125e9da59c1e60b15d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSOI:bgGYcA/53GAA6y37Q6dI+d5r
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_f32560df8435ec60a5844546e1c77f53_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_f32560df8435ec60a5844546e1c77f53_cryptolocker.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-03-25_f32560df8435ec60a5844546e1c77f53_cryptolocker
-
Size
50KB
-
MD5
f32560df8435ec60a5844546e1c77f53
-
SHA1
b1d1e36b4d578a6055198761a85ef8068cc8d8a8
-
SHA256
96f0f1946a1652b087cede0ae386f4ed9b12c1cdafbcdb1be389d737f07483b1
-
SHA512
594c909bdce9512563d9283e2200a3100903ed60917fc6357e36eda59b007e5dce6e3319e5eebabfe9b22c226aa558a07f6f0f6f676f24125e9da59c1e60b15d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSOI:bgGYcA/53GAA6y37Q6dI+d5r
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-