General
-
Target
2024-03-25_d0c9b8c9bc808d85bbe6350a7e52985a_cryptolocker
-
Size
40KB
-
Sample
240325-yrllmsgf88
-
MD5
d0c9b8c9bc808d85bbe6350a7e52985a
-
SHA1
dda202c0594acd4e7430af99e4a7a9968d61e5df
-
SHA256
6b0595e16ce14ec8ec01826ca2f879eba4f5d3273b574426edeb715f62bb5a17
-
SHA512
9e8fc2dd6b11a6d888ac5186a3d3502c56de0a43a19baf40b07e8341a7ab587e9d2ec7b32fb644a1efce86d92621919aa0e0d374e54269eb9e108764e61c1340
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnA:bCDOw9aMDooc+vAA
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_d0c9b8c9bc808d85bbe6350a7e52985a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_d0c9b8c9bc808d85bbe6350a7e52985a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_d0c9b8c9bc808d85bbe6350a7e52985a_cryptolocker
-
Size
40KB
-
MD5
d0c9b8c9bc808d85bbe6350a7e52985a
-
SHA1
dda202c0594acd4e7430af99e4a7a9968d61e5df
-
SHA256
6b0595e16ce14ec8ec01826ca2f879eba4f5d3273b574426edeb715f62bb5a17
-
SHA512
9e8fc2dd6b11a6d888ac5186a3d3502c56de0a43a19baf40b07e8341a7ab587e9d2ec7b32fb644a1efce86d92621919aa0e0d374e54269eb9e108764e61c1340
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnA:bCDOw9aMDooc+vAA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-