General
-
Target
2024-04-19_e5dd3755bb0702f268347d344ac6e12d_cryptolocker
-
Size
41KB
-
Sample
240419-a3f9ascf2x
-
MD5
e5dd3755bb0702f268347d344ac6e12d
-
SHA1
0ee7d04548e166a92f938ee7264b6b0baaeebf15
-
SHA256
30e1fbbd183b8e7eb3183e7dbfd7430b27496300f11be01929b34c16674f2316
-
SHA512
d849c84e88c0e39d81a5ff0068f6ca0eba47dbd5027f8dbb4971ce3b4b1645f06c9d5fe4e50a1343d365470da7b3e4e920b5900568c5cc87a0e789168bf55dd6
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAH+:bCDOw9aMDooc+vAe
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_e5dd3755bb0702f268347d344ac6e12d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-19_e5dd3755bb0702f268347d344ac6e12d_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-19_e5dd3755bb0702f268347d344ac6e12d_cryptolocker
-
Size
41KB
-
MD5
e5dd3755bb0702f268347d344ac6e12d
-
SHA1
0ee7d04548e166a92f938ee7264b6b0baaeebf15
-
SHA256
30e1fbbd183b8e7eb3183e7dbfd7430b27496300f11be01929b34c16674f2316
-
SHA512
d849c84e88c0e39d81a5ff0068f6ca0eba47dbd5027f8dbb4971ce3b4b1645f06c9d5fe4e50a1343d365470da7b3e4e920b5900568c5cc87a0e789168bf55dd6
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAH+:bCDOw9aMDooc+vAe
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-