General
-
Target
2024-04-04_9a2aa0cbe58afe7a3544f2c4230f4f62_cryptolocker
-
Size
38KB
-
Sample
240404-zb9h7sad35
-
MD5
9a2aa0cbe58afe7a3544f2c4230f4f62
-
SHA1
2bf290d2485c9b942065f9995981c4fe6b4eaa8e
-
SHA256
d7a0a09deded6c8d0011a344c5780e9e9a94ca1395f7e24b117d070feecb7943
-
SHA512
df3e89d2598ece1ad524ef6db254fde3687b3da0357cb6fb3c7785208e79f82d1e15e773b7537a74ab026216b62ae314382f16336253d0f5b5a6d7e409d37696
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4Hmd:bA6YcA/X6G0W1BGd
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-04_9a2aa0cbe58afe7a3544f2c4230f4f62_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-04_9a2aa0cbe58afe7a3544f2c4230f4f62_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-04_9a2aa0cbe58afe7a3544f2c4230f4f62_cryptolocker
-
Size
38KB
-
MD5
9a2aa0cbe58afe7a3544f2c4230f4f62
-
SHA1
2bf290d2485c9b942065f9995981c4fe6b4eaa8e
-
SHA256
d7a0a09deded6c8d0011a344c5780e9e9a94ca1395f7e24b117d070feecb7943
-
SHA512
df3e89d2598ece1ad524ef6db254fde3687b3da0357cb6fb3c7785208e79f82d1e15e773b7537a74ab026216b62ae314382f16336253d0f5b5a6d7e409d37696
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4Hmd:bA6YcA/X6G0W1BGd
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-