General
-
Target
2024-04-06_1395198ff13568ea0dab840ad2f75fbb_cryptolocker
-
Size
43KB
-
Sample
240406-pm43raac2x
-
MD5
1395198ff13568ea0dab840ad2f75fbb
-
SHA1
0db467820e4ad4df63bf9c4b0ab768be41d1f808
-
SHA256
6e319510c3fbf2276b25510f2f2e86a57eb25d5d4ca195a59c7bd8978ebc8c74
-
SHA512
658202eef37f7e3b36dd2435784aee8442e99f08ea82f3796f79e74a215df95395778d1f5e85f5ebbe3b2501d2d9c5ecba17c0ffa2736c17f5fca566e811e5b3
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq0Kb2zu:bc/y2lkF0+BjJbL
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_1395198ff13568ea0dab840ad2f75fbb_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-06_1395198ff13568ea0dab840ad2f75fbb_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-06_1395198ff13568ea0dab840ad2f75fbb_cryptolocker
-
Size
43KB
-
MD5
1395198ff13568ea0dab840ad2f75fbb
-
SHA1
0db467820e4ad4df63bf9c4b0ab768be41d1f808
-
SHA256
6e319510c3fbf2276b25510f2f2e86a57eb25d5d4ca195a59c7bd8978ebc8c74
-
SHA512
658202eef37f7e3b36dd2435784aee8442e99f08ea82f3796f79e74a215df95395778d1f5e85f5ebbe3b2501d2d9c5ecba17c0ffa2736c17f5fca566e811e5b3
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq0Kb2zu:bc/y2lkF0+BjJbL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-