General
-
Target
2024-04-21_7d2f6f090675ed121f0059a81b7a4080_cryptolocker
-
Size
33KB
-
Sample
240421-bq72xsfc85
-
MD5
7d2f6f090675ed121f0059a81b7a4080
-
SHA1
9973ee5b6eea3413fdf9bceaa95a63099d243344
-
SHA256
6411ff3a5c10c0c21396a1a1b3d3e6a7ecead5841a00a0242812671b5919ea52
-
SHA512
b17d07810f1efdc202125a23c4741475939e4aab8c376c9722d981f189f3babe792e2b2e21e9bdaa17134f417d84515f26927e033c7a158a009b39db8095063a
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5M4X:bxNrC7kYo1Fxf2rYA2
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-21_7d2f6f090675ed121f0059a81b7a4080_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-21_7d2f6f090675ed121f0059a81b7a4080_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-21_7d2f6f090675ed121f0059a81b7a4080_cryptolocker
-
Size
33KB
-
MD5
7d2f6f090675ed121f0059a81b7a4080
-
SHA1
9973ee5b6eea3413fdf9bceaa95a63099d243344
-
SHA256
6411ff3a5c10c0c21396a1a1b3d3e6a7ecead5841a00a0242812671b5919ea52
-
SHA512
b17d07810f1efdc202125a23c4741475939e4aab8c376c9722d981f189f3babe792e2b2e21e9bdaa17134f417d84515f26927e033c7a158a009b39db8095063a
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5M4X:bxNrC7kYo1Fxf2rYA2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-