General
-
Target
2024-04-15_49953930d0c4b09b9e3a72143d984577_cryptolocker
-
Size
54KB
-
Sample
240415-lpbmfadf9w
-
MD5
49953930d0c4b09b9e3a72143d984577
-
SHA1
aff32fefad72309ca8036e5dc6f2d096ac941e41
-
SHA256
ec28076a58f45923cb9e14e191c96a900e99d26412fd176016e405d7baa7ad72
-
SHA512
ae25a6b3588b0405922516c284113ade519073b334a29d92863cb739fcc24d4f738c93dbb7650b5c5e7474c6bbf6e111d451de22bfe765f2df2d5e3632567729
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puq:bIDOw9a0DwitDZzcTLq
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_49953930d0c4b09b9e3a72143d984577_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-15_49953930d0c4b09b9e3a72143d984577_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-15_49953930d0c4b09b9e3a72143d984577_cryptolocker
-
Size
54KB
-
MD5
49953930d0c4b09b9e3a72143d984577
-
SHA1
aff32fefad72309ca8036e5dc6f2d096ac941e41
-
SHA256
ec28076a58f45923cb9e14e191c96a900e99d26412fd176016e405d7baa7ad72
-
SHA512
ae25a6b3588b0405922516c284113ade519073b334a29d92863cb739fcc24d4f738c93dbb7650b5c5e7474c6bbf6e111d451de22bfe765f2df2d5e3632567729
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puq:bIDOw9a0DwitDZzcTLq
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-