General
-
Target
2024-04-19_f35f54eb89bf99bc998c37043f455562_cryptolocker
-
Size
40KB
-
Sample
240420-aly3sacb7t
-
MD5
f35f54eb89bf99bc998c37043f455562
-
SHA1
4ed539d580df386772bab51a2f23bbb361994f15
-
SHA256
1b156aa8eb2107cacdf8290965d2a2782ece3000f4a5503662bf5af630712269
-
SHA512
caf9ad3fc4f594c71b0117c0a100c34d4899c927356d55b94deb5e9d9bd0feccab0b0a11c6c68548ebe2040fcd678e01611be29d712747e5b8bcec7c4db47cac
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x36:bIDOw9a0Dwo3P1ojvUSD79R6
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_f35f54eb89bf99bc998c37043f455562_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-19_f35f54eb89bf99bc998c37043f455562_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-19_f35f54eb89bf99bc998c37043f455562_cryptolocker
-
Size
40KB
-
MD5
f35f54eb89bf99bc998c37043f455562
-
SHA1
4ed539d580df386772bab51a2f23bbb361994f15
-
SHA256
1b156aa8eb2107cacdf8290965d2a2782ece3000f4a5503662bf5af630712269
-
SHA512
caf9ad3fc4f594c71b0117c0a100c34d4899c927356d55b94deb5e9d9bd0feccab0b0a11c6c68548ebe2040fcd678e01611be29d712747e5b8bcec7c4db47cac
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x36:bIDOw9a0Dwo3P1ojvUSD79R6
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-