General
-
Target
2024-03-27_09608ccfd15b8c7e71204b441e4ec459_cryptolocker
-
Size
43KB
-
Sample
240327-dzcy9aef2s
-
MD5
09608ccfd15b8c7e71204b441e4ec459
-
SHA1
d61a213223064383d857fc119d6e9e96c800d989
-
SHA256
e4414c4a0f84283b4ce2e85b6e7485ee68f38eb6308068bd4c31471930a64b5a
-
SHA512
4fe08aaebfb6c70d6458917fe28cb843fe9056e2b4407633886926bbeff1eeaf24e4c775d5eff92d36d482b317339dd6f70fc374d19a7ed4e31034a58c50cde9
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGuj5:bc/y2lkF0+Bjrdut
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_09608ccfd15b8c7e71204b441e4ec459_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_09608ccfd15b8c7e71204b441e4ec459_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_09608ccfd15b8c7e71204b441e4ec459_cryptolocker
-
Size
43KB
-
MD5
09608ccfd15b8c7e71204b441e4ec459
-
SHA1
d61a213223064383d857fc119d6e9e96c800d989
-
SHA256
e4414c4a0f84283b4ce2e85b6e7485ee68f38eb6308068bd4c31471930a64b5a
-
SHA512
4fe08aaebfb6c70d6458917fe28cb843fe9056e2b4407633886926bbeff1eeaf24e4c775d5eff92d36d482b317339dd6f70fc374d19a7ed4e31034a58c50cde9
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGuj5:bc/y2lkF0+Bjrdut
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-