General
-
Target
2024-03-25_7e39dc4026906543a589eec03e03e842_cryptolocker
-
Size
34KB
-
Sample
240325-p11x9aga62
-
MD5
7e39dc4026906543a589eec03e03e842
-
SHA1
34f36cf123cf45eb5b735ac58ad3a6308f14541e
-
SHA256
763eb1caca66418946b7a073d36c2582369be78e176bd97a7246bfec29889125
-
SHA512
916119a04f0c60f7df66f341ba01abc074e8a79900f3d3599f068e929901107e074573c4922692fa0eb3f7397c8c5c5897866708bebecc24c76ef8408ee82a02
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kbg8:b7o/2n1TCraU6GD1a4Xt9bRU6zAx
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_7e39dc4026906543a589eec03e03e842_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_7e39dc4026906543a589eec03e03e842_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_7e39dc4026906543a589eec03e03e842_cryptolocker
-
Size
34KB
-
MD5
7e39dc4026906543a589eec03e03e842
-
SHA1
34f36cf123cf45eb5b735ac58ad3a6308f14541e
-
SHA256
763eb1caca66418946b7a073d36c2582369be78e176bd97a7246bfec29889125
-
SHA512
916119a04f0c60f7df66f341ba01abc074e8a79900f3d3599f068e929901107e074573c4922692fa0eb3f7397c8c5c5897866708bebecc24c76ef8408ee82a02
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kbg8:b7o/2n1TCraU6GD1a4Xt9bRU6zAx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-