General
-
Target
2024-04-08_1c34f60beb6da18cc90d7f1eb386dd30_cryptolocker
-
Size
39KB
-
Sample
240409-sy1fgsec6v
-
MD5
1c34f60beb6da18cc90d7f1eb386dd30
-
SHA1
a0fb20a11347679eaf1edf1e61c3e8e46a5e8275
-
SHA256
76aeedd898216535cf8bd82c292b39ffb253962b5b98daf77b3a8f9cf70f74d1
-
SHA512
cea917b5dd93350c76df6d04db87b9ac64c543870d370ec9cf5a77cbbd146d4d4261973338066b6a26604a286ab5d8928398147f05bb746530cfc24ce4ffaa6c
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UT7:bAvJCYOOvbRPDEgXrNekd7l94i3py/T7
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-08_1c34f60beb6da18cc90d7f1eb386dd30_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-08_1c34f60beb6da18cc90d7f1eb386dd30_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-08_1c34f60beb6da18cc90d7f1eb386dd30_cryptolocker
-
Size
39KB
-
MD5
1c34f60beb6da18cc90d7f1eb386dd30
-
SHA1
a0fb20a11347679eaf1edf1e61c3e8e46a5e8275
-
SHA256
76aeedd898216535cf8bd82c292b39ffb253962b5b98daf77b3a8f9cf70f74d1
-
SHA512
cea917b5dd93350c76df6d04db87b9ac64c543870d370ec9cf5a77cbbd146d4d4261973338066b6a26604a286ab5d8928398147f05bb746530cfc24ce4ffaa6c
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UT7:bAvJCYOOvbRPDEgXrNekd7l94i3py/T7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-