General
-
Target
2024-04-05_ea66ff1049ec40e2b57b8ac67a7254af_cryptolocker
-
Size
40KB
-
Sample
240405-pjjyeacd83
-
MD5
ea66ff1049ec40e2b57b8ac67a7254af
-
SHA1
2a70e65923bcb28762e8bf3ffa0b46fbe4f80dab
-
SHA256
550426210813df6dbfdedcd65bdb2e7dec1d91df64d22b97ceb7e88e7647dde0
-
SHA512
515d551e3a225c29e07afa5a218ff2556cc73332efb4214c01d58e992292d067d6f2ac5ba5fc92f12763ba2b829d85620ddaf4732b4400e94848ff4bb439eb80
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnDd:bCDOw9aMDooc+vADd
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_ea66ff1049ec40e2b57b8ac67a7254af_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_ea66ff1049ec40e2b57b8ac67a7254af_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-05_ea66ff1049ec40e2b57b8ac67a7254af_cryptolocker
-
Size
40KB
-
MD5
ea66ff1049ec40e2b57b8ac67a7254af
-
SHA1
2a70e65923bcb28762e8bf3ffa0b46fbe4f80dab
-
SHA256
550426210813df6dbfdedcd65bdb2e7dec1d91df64d22b97ceb7e88e7647dde0
-
SHA512
515d551e3a225c29e07afa5a218ff2556cc73332efb4214c01d58e992292d067d6f2ac5ba5fc92f12763ba2b829d85620ddaf4732b4400e94848ff4bb439eb80
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnDd:bCDOw9aMDooc+vADd
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-