General
-
Target
2024-04-10_428eac510ad7dd7806979af60e24dd03_cryptolocker
-
Size
41KB
-
Sample
240410-c3gwyaca93
-
MD5
428eac510ad7dd7806979af60e24dd03
-
SHA1
44b2df3fab5173eea33474d1a0f80a7ee4d3a215
-
SHA256
55b9add521f357bacd3175c708a7a5d0315c81dc0caa83305a2c79a88cf5ebd2
-
SHA512
f98e8ed2a6a419b91f240bd7dc5c2abcd9fcaece50daabfaee7c0984dd4c6e6a7102b389e004831d6ada72497eee8b2dc717e1cedbc36ab4771577353d2928ca
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA0:b/pYayGig5HjS3NPA0
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_428eac510ad7dd7806979af60e24dd03_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_428eac510ad7dd7806979af60e24dd03_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_428eac510ad7dd7806979af60e24dd03_cryptolocker
-
Size
41KB
-
MD5
428eac510ad7dd7806979af60e24dd03
-
SHA1
44b2df3fab5173eea33474d1a0f80a7ee4d3a215
-
SHA256
55b9add521f357bacd3175c708a7a5d0315c81dc0caa83305a2c79a88cf5ebd2
-
SHA512
f98e8ed2a6a419b91f240bd7dc5c2abcd9fcaece50daabfaee7c0984dd4c6e6a7102b389e004831d6ada72497eee8b2dc717e1cedbc36ab4771577353d2928ca
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA0:b/pYayGig5HjS3NPA0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-