General
-
Target
2024-04-08_c571dab4cf2c31600a0b07dc9977409c_cryptolocker
-
Size
37KB
-
Sample
240408-s5qjvsda42
-
MD5
c571dab4cf2c31600a0b07dc9977409c
-
SHA1
cf7e27e8d64c833980481801db82603e13d781b6
-
SHA256
9d19b5c08196e363b11da03ff390fb7383d9d2c5e592b277f10ae369349b2c79
-
SHA512
1fbffa3ecfefdd22b94aecbe9619ec66a4be6d50c2de9325d7a92d4ba4b77e8944e933aaf0f925731fa7b1493a2ddd066a27f4f2294e038fcbe4f0b190a73722
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HK:bA6YcA/X6G0W143q
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-08_c571dab4cf2c31600a0b07dc9977409c_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-08_c571dab4cf2c31600a0b07dc9977409c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-08_c571dab4cf2c31600a0b07dc9977409c_cryptolocker
-
Size
37KB
-
MD5
c571dab4cf2c31600a0b07dc9977409c
-
SHA1
cf7e27e8d64c833980481801db82603e13d781b6
-
SHA256
9d19b5c08196e363b11da03ff390fb7383d9d2c5e592b277f10ae369349b2c79
-
SHA512
1fbffa3ecfefdd22b94aecbe9619ec66a4be6d50c2de9325d7a92d4ba4b77e8944e933aaf0f925731fa7b1493a2ddd066a27f4f2294e038fcbe4f0b190a73722
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HK:bA6YcA/X6G0W143q
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-