General
-
Target
2024-04-05_1baa73fcf34359574079bdf87888d1be_cryptolocker
-
Size
39KB
-
Sample
240405-h9lrcseg82
-
MD5
1baa73fcf34359574079bdf87888d1be
-
SHA1
609f4a52e6dee05cde6ac60224e3428ae3dbdf1c
-
SHA256
bbb071827e9dcc4c76366158bfb47964c04d6875869bf48fe8bf217e7eec09c3
-
SHA512
66bc253c769956515af969abf476721e2da823497c43d96bc3d56f0d1593757f507313a8de157c43278cb3f62d1e98876e8896a594f57f0db061159529f02a1c
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xgye:bIDOw9a0Dwo3P1ojvUSD79yye
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_1baa73fcf34359574079bdf87888d1be_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_1baa73fcf34359574079bdf87888d1be_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-05_1baa73fcf34359574079bdf87888d1be_cryptolocker
-
Size
39KB
-
MD5
1baa73fcf34359574079bdf87888d1be
-
SHA1
609f4a52e6dee05cde6ac60224e3428ae3dbdf1c
-
SHA256
bbb071827e9dcc4c76366158bfb47964c04d6875869bf48fe8bf217e7eec09c3
-
SHA512
66bc253c769956515af969abf476721e2da823497c43d96bc3d56f0d1593757f507313a8de157c43278cb3f62d1e98876e8896a594f57f0db061159529f02a1c
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xgye:bIDOw9a0Dwo3P1ojvUSD79yye
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-