General
-
Target
2024-04-10_203c8fd1370cebf58850f215cefc4ccc_cryptolocker
-
Size
40KB
-
Sample
240410-nkr5qsdh74
-
MD5
203c8fd1370cebf58850f215cefc4ccc
-
SHA1
1058349770ff198dd79187abab55605c3acf901b
-
SHA256
36d633e781a43f8db66eb67fd2761d431df68aede86fc28a44f861760358feca
-
SHA512
af3f30ff54ffc101c0166aca1408f46b762fbd59a82b1823afcc5cc1a161a7f3427e0ccf324fcaafe84c5587fdea1c72ed1ecf4d94414e7b9b38161a7745ee69
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXW1Rb:bgGYcA/53GADw8C3qd
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_203c8fd1370cebf58850f215cefc4ccc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_203c8fd1370cebf58850f215cefc4ccc_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_203c8fd1370cebf58850f215cefc4ccc_cryptolocker
-
Size
40KB
-
MD5
203c8fd1370cebf58850f215cefc4ccc
-
SHA1
1058349770ff198dd79187abab55605c3acf901b
-
SHA256
36d633e781a43f8db66eb67fd2761d431df68aede86fc28a44f861760358feca
-
SHA512
af3f30ff54ffc101c0166aca1408f46b762fbd59a82b1823afcc5cc1a161a7f3427e0ccf324fcaafe84c5587fdea1c72ed1ecf4d94414e7b9b38161a7745ee69
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXW1Rb:bgGYcA/53GADw8C3qd
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-