General
-
Target
2024-04-16_1346f7b2fddeee80a812cf4b9da9fd87_cryptolocker
-
Size
51KB
-
Sample
240416-19mb1aeb95
-
MD5
1346f7b2fddeee80a812cf4b9da9fd87
-
SHA1
72e5e4d816c151000a78034db058d7a90caa6588
-
SHA256
f81820375a3cb9689a8018cd7b35a8aa9df8dc26f32099c88150cb0113bd2878
-
SHA512
d30e391e4b94dbfff0bbabf4ce44731825ca616a392cf4ce865034880df48e42d08927452631a4c1f9a8161d97e4d4268fff5e8949a9143b034b4ea52bea7757
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4GjtY:bgGYcA/53GAA6y37Q6dI+d5QGZY
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_1346f7b2fddeee80a812cf4b9da9fd87_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_1346f7b2fddeee80a812cf4b9da9fd87_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_1346f7b2fddeee80a812cf4b9da9fd87_cryptolocker
-
Size
51KB
-
MD5
1346f7b2fddeee80a812cf4b9da9fd87
-
SHA1
72e5e4d816c151000a78034db058d7a90caa6588
-
SHA256
f81820375a3cb9689a8018cd7b35a8aa9df8dc26f32099c88150cb0113bd2878
-
SHA512
d30e391e4b94dbfff0bbabf4ce44731825ca616a392cf4ce865034880df48e42d08927452631a4c1f9a8161d97e4d4268fff5e8949a9143b034b4ea52bea7757
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4GjtY:bgGYcA/53GAA6y37Q6dI+d5QGZY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-