General
-
Target
2024-04-06_f57d8eaff59727be57d1c00667a11ccc_cryptolocker
-
Size
37KB
-
Sample
240406-hkab2ade85
-
MD5
f57d8eaff59727be57d1c00667a11ccc
-
SHA1
27ee8f01080bc9c95145eee5acb5674c69642edf
-
SHA256
572d81661cc9cc2aadcbdb0763c4bb3968d082c7cc83949b5ddf0aed3f838c6a
-
SHA512
5d15250e0dcaa2d711c3e1e9c67a97a24e3121da8f3b8388836cdee54d4431d48165b84ccae95a8f06d74fbb8d73857f2c647cc224384b74e9667f95dfbcf77a
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLigYqVwX1qpT:bA74zYcgT/Ekd0ryfj86U8zbUYqSFqt
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_f57d8eaff59727be57d1c00667a11ccc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-06_f57d8eaff59727be57d1c00667a11ccc_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-06_f57d8eaff59727be57d1c00667a11ccc_cryptolocker
-
Size
37KB
-
MD5
f57d8eaff59727be57d1c00667a11ccc
-
SHA1
27ee8f01080bc9c95145eee5acb5674c69642edf
-
SHA256
572d81661cc9cc2aadcbdb0763c4bb3968d082c7cc83949b5ddf0aed3f838c6a
-
SHA512
5d15250e0dcaa2d711c3e1e9c67a97a24e3121da8f3b8388836cdee54d4431d48165b84ccae95a8f06d74fbb8d73857f2c647cc224384b74e9667f95dfbcf77a
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLigYqVwX1qpT:bA74zYcgT/Ekd0ryfj86U8zbUYqSFqt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-