General
-
Target
2024-04-18_e1179dabb7439761773b36eb8fc0a455_cryptolocker
-
Size
38KB
-
Sample
240418-p85w6sdh83
-
MD5
e1179dabb7439761773b36eb8fc0a455
-
SHA1
db84465006e00766f5c3c04b93351aec9c9d77d3
-
SHA256
490aca481b07a8274bdad162d4297d5b4ba34e8fd4adef4d2f91a4166ecc194d
-
SHA512
db044279f27d536750bb3bff8ae58bd0c85164d8dd5f6c581dca5f0ddf58eb6f91d198dcf7e93d5ba23ca8ab670d8b2e27a8999c6ec5478e1c7ef6c206928800
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4HmS:bA6YcA/X6G0W1BGS
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_e1179dabb7439761773b36eb8fc0a455_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-18_e1179dabb7439761773b36eb8fc0a455_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-18_e1179dabb7439761773b36eb8fc0a455_cryptolocker
-
Size
38KB
-
MD5
e1179dabb7439761773b36eb8fc0a455
-
SHA1
db84465006e00766f5c3c04b93351aec9c9d77d3
-
SHA256
490aca481b07a8274bdad162d4297d5b4ba34e8fd4adef4d2f91a4166ecc194d
-
SHA512
db044279f27d536750bb3bff8ae58bd0c85164d8dd5f6c581dca5f0ddf58eb6f91d198dcf7e93d5ba23ca8ab670d8b2e27a8999c6ec5478e1c7ef6c206928800
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmxT4HmS:bA6YcA/X6G0W1BGS
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-