General
-
Target
2024-04-10_3449cd6ce9e425d8ede84f2eb7d54dbf_cryptolocker
-
Size
39KB
-
Sample
240410-w5r98sga64
-
MD5
3449cd6ce9e425d8ede84f2eb7d54dbf
-
SHA1
5144d1a27f7e3048aa1e795ca538f05353a36617
-
SHA256
ea42bfc55c2ae3af3b469774695ad6e63dd44f7073ed050329be55051aa331d5
-
SHA512
0a5b02dfa5e41630d7aaaedf27b55836ebd52de57d3bb3b16a5dc94d88309eed13e62e3b4f21da0769d1f7970db7a1c9da5270187b5e85f5f1dd56115a0beaa0
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKc+Jzq2:X6QFElP6n+gJQMOtEvwDpjBsYKFNq2
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_3449cd6ce9e425d8ede84f2eb7d54dbf_cryptolocker.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-10_3449cd6ce9e425d8ede84f2eb7d54dbf_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_3449cd6ce9e425d8ede84f2eb7d54dbf_cryptolocker
-
Size
39KB
-
MD5
3449cd6ce9e425d8ede84f2eb7d54dbf
-
SHA1
5144d1a27f7e3048aa1e795ca538f05353a36617
-
SHA256
ea42bfc55c2ae3af3b469774695ad6e63dd44f7073ed050329be55051aa331d5
-
SHA512
0a5b02dfa5e41630d7aaaedf27b55836ebd52de57d3bb3b16a5dc94d88309eed13e62e3b4f21da0769d1f7970db7a1c9da5270187b5e85f5f1dd56115a0beaa0
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKc+Jzq2:X6QFElP6n+gJQMOtEvwDpjBsYKFNq2
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-