General
-
Target
2024-04-09_b82e9dea630e76ffeb35a7abcdc905b4_cryptolocker
-
Size
42KB
-
Sample
240409-kn35maec4y
-
MD5
b82e9dea630e76ffeb35a7abcdc905b4
-
SHA1
fa8094a9503474a07b033a52e045fabc843dcd89
-
SHA256
2f7f76eeb8fb696ace7cc417c67604731dd3ae827900b045c8b1204a49764d92
-
SHA512
662bb9ba1e078d74380c0a45ddaa805c5646fb3d2e5c7e35e81932d9140af0d52dc653b1d94e9b6631bfadc4e261bef6746b62f33d9612a78a4da2b0e43aa8e1
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRYtsI:bc/y2lkF0+BlJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-09_b82e9dea630e76ffeb35a7abcdc905b4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-09_b82e9dea630e76ffeb35a7abcdc905b4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-09_b82e9dea630e76ffeb35a7abcdc905b4_cryptolocker
-
Size
42KB
-
MD5
b82e9dea630e76ffeb35a7abcdc905b4
-
SHA1
fa8094a9503474a07b033a52e045fabc843dcd89
-
SHA256
2f7f76eeb8fb696ace7cc417c67604731dd3ae827900b045c8b1204a49764d92
-
SHA512
662bb9ba1e078d74380c0a45ddaa805c5646fb3d2e5c7e35e81932d9140af0d52dc653b1d94e9b6631bfadc4e261bef6746b62f33d9612a78a4da2b0e43aa8e1
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRYtsI:bc/y2lkF0+BlJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-