General
-
Target
2024-03-25_29f3b91f5e03c0fafb4992a177597905_cryptolocker
-
Size
40KB
-
Sample
240325-yg3r6sbc2z
-
MD5
29f3b91f5e03c0fafb4992a177597905
-
SHA1
e73ac880db23be747215928b66e0b16a96a86153
-
SHA256
536458fd5b134be71109e094ca78ab5ded6de5a6bcb8ee16fdf7346cd665baa9
-
SHA512
f7aba1a3eca2a4f55e8e9d79fbcf0deae2234534af74619814eff6a98b80f744c5eb23f7ea53baae20b2fe3da1686b8df03f03e13b3c591f7caef0d1eedc408c
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAY:bCDOw9aMDooc+vAY
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_29f3b91f5e03c0fafb4992a177597905_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_29f3b91f5e03c0fafb4992a177597905_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_29f3b91f5e03c0fafb4992a177597905_cryptolocker
-
Size
40KB
-
MD5
29f3b91f5e03c0fafb4992a177597905
-
SHA1
e73ac880db23be747215928b66e0b16a96a86153
-
SHA256
536458fd5b134be71109e094ca78ab5ded6de5a6bcb8ee16fdf7346cd665baa9
-
SHA512
f7aba1a3eca2a4f55e8e9d79fbcf0deae2234534af74619814eff6a98b80f744c5eb23f7ea53baae20b2fe3da1686b8df03f03e13b3c591f7caef0d1eedc408c
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAY:bCDOw9aMDooc+vAY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-