General
-
Target
2024-04-18_4625b4f10dab2d9b4a182b35ecd382e0_cryptolocker
-
Size
42KB
-
Sample
240418-faywjabc96
-
MD5
4625b4f10dab2d9b4a182b35ecd382e0
-
SHA1
5f302db2b596686ffb1065abb7f64444f27018e6
-
SHA256
07660b1200ec38c89b2e117ae45b22b4d94817ff3322d5e2ac88df9717e2e07d
-
SHA512
b822d182f01e894d3a3af976dfb07e200f07cbbdd2f871cf796a31e0d4b829f3d9fa173ec7d7b88b12228bd95aea898e775b9d320ece6e8128d4071a4b2bc221
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphq9:bc/y2lkF0+Beq9
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_4625b4f10dab2d9b4a182b35ecd382e0_cryptolocker.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-18_4625b4f10dab2d9b4a182b35ecd382e0_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-18_4625b4f10dab2d9b4a182b35ecd382e0_cryptolocker
-
Size
42KB
-
MD5
4625b4f10dab2d9b4a182b35ecd382e0
-
SHA1
5f302db2b596686ffb1065abb7f64444f27018e6
-
SHA256
07660b1200ec38c89b2e117ae45b22b4d94817ff3322d5e2ac88df9717e2e07d
-
SHA512
b822d182f01e894d3a3af976dfb07e200f07cbbdd2f871cf796a31e0d4b829f3d9fa173ec7d7b88b12228bd95aea898e775b9d320ece6e8128d4071a4b2bc221
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphq9:bc/y2lkF0+Beq9
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-