General
-
Target
2024-04-16_f847ff791c718d49c28bc232c4310fd5_cryptolocker
-
Size
30KB
-
Sample
240416-a6e6eaeg5s
-
MD5
f847ff791c718d49c28bc232c4310fd5
-
SHA1
503bca4bf79b319395bc3135cbf5575635ff5414
-
SHA256
6ce48bbc2a985a944bf40d196bedb33c4f1cb4001bb96a0c7a34091a171f337e
-
SHA512
44f9f743d01fc114deefdfaf502ad72a7ab61bec1c0c9af09e14a46534cd4107f9cca9b34163ebf0939cbce431086c117436c0304b8596692a8cf47ea117f185
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTJ:bG74zYcgT/Ekd0ryfjl
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_f847ff791c718d49c28bc232c4310fd5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_f847ff791c718d49c28bc232c4310fd5_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_f847ff791c718d49c28bc232c4310fd5_cryptolocker
-
Size
30KB
-
MD5
f847ff791c718d49c28bc232c4310fd5
-
SHA1
503bca4bf79b319395bc3135cbf5575635ff5414
-
SHA256
6ce48bbc2a985a944bf40d196bedb33c4f1cb4001bb96a0c7a34091a171f337e
-
SHA512
44f9f743d01fc114deefdfaf502ad72a7ab61bec1c0c9af09e14a46534cd4107f9cca9b34163ebf0939cbce431086c117436c0304b8596692a8cf47ea117f185
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTJ:bG74zYcgT/Ekd0ryfjl
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-