General
-
Target
2024-03-29_71968494c8a01d23d99711c5a46806cf_cryptolocker
-
Size
43KB
-
Sample
240329-sy682aca98
-
MD5
71968494c8a01d23d99711c5a46806cf
-
SHA1
df1bde7e69aebb1de2de3711a4f18690fba899cb
-
SHA256
eb5e62377e31e77922803169c62e9d1e8364322eab3e2759e2c096d2fe069079
-
SHA512
40292d48f8df60047d6c1ae308fb7ea0d0ee683646fb97d7294c9ab716db8cfeb3e094b866758cd37018e6f684478e211556a740fd1e6eae60c697c7cd5f414b
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNco:bgGYcA/53GADw8Cl/5o
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-29_71968494c8a01d23d99711c5a46806cf_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-29_71968494c8a01d23d99711c5a46806cf_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-29_71968494c8a01d23d99711c5a46806cf_cryptolocker
-
Size
43KB
-
MD5
71968494c8a01d23d99711c5a46806cf
-
SHA1
df1bde7e69aebb1de2de3711a4f18690fba899cb
-
SHA256
eb5e62377e31e77922803169c62e9d1e8364322eab3e2759e2c096d2fe069079
-
SHA512
40292d48f8df60047d6c1ae308fb7ea0d0ee683646fb97d7294c9ab716db8cfeb3e094b866758cd37018e6f684478e211556a740fd1e6eae60c697c7cd5f414b
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNco:bgGYcA/53GADw8Cl/5o
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-