General
-
Target
2024-04-18_5421b1e2c33bbc95acb63a6822c9a02a_cryptolocker
-
Size
41KB
-
Sample
240418-mk32kabg6t
-
MD5
5421b1e2c33bbc95acb63a6822c9a02a
-
SHA1
dc3927444500dfda199ae7c4304123a3e5d1f4ac
-
SHA256
35134e738636d3225f18e0eb92923bdedff58d0a9bc252f35be566270a706c94
-
SHA512
a73cf8e2a40fc340aee7a4944192af5a6ce7a7fa88cb2f414490e6ae845564704e4ff7345a0581cee2c82b71b5b892b20ecd49bf200766c14210fe5d24bb3b8e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vVcSYic:bgGYcA/53GADw8ClrcTcSYT
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_5421b1e2c33bbc95acb63a6822c9a02a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-18_5421b1e2c33bbc95acb63a6822c9a02a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-18_5421b1e2c33bbc95acb63a6822c9a02a_cryptolocker
-
Size
41KB
-
MD5
5421b1e2c33bbc95acb63a6822c9a02a
-
SHA1
dc3927444500dfda199ae7c4304123a3e5d1f4ac
-
SHA256
35134e738636d3225f18e0eb92923bdedff58d0a9bc252f35be566270a706c94
-
SHA512
a73cf8e2a40fc340aee7a4944192af5a6ce7a7fa88cb2f414490e6ae845564704e4ff7345a0581cee2c82b71b5b892b20ecd49bf200766c14210fe5d24bb3b8e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vVcSYic:bgGYcA/53GADw8ClrcTcSYT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-