General
-
Target
2024-04-21_f9deed070745165dbd42062cd5667f94_cryptolocker
-
Size
41KB
-
Sample
240421-gs27cadc3w
-
MD5
f9deed070745165dbd42062cd5667f94
-
SHA1
057211a465f0d90015f34ba303741d6fbc83455d
-
SHA256
b207ef275e4b20e67847a9f5edfa662bf9d90f457f4853185f5b80fad1d40357
-
SHA512
918697df39acbfc6a128be79d59152d47353070848e4770200d190129377d3356cf30362a11626c890756f1060b29e6ca9a6b4e6c0e0dfb5f436afe96513a70c
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3kO:bIDOw9a0Dwo3P1ojvUSD79RkO
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-21_f9deed070745165dbd42062cd5667f94_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-21_f9deed070745165dbd42062cd5667f94_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-21_f9deed070745165dbd42062cd5667f94_cryptolocker
-
Size
41KB
-
MD5
f9deed070745165dbd42062cd5667f94
-
SHA1
057211a465f0d90015f34ba303741d6fbc83455d
-
SHA256
b207ef275e4b20e67847a9f5edfa662bf9d90f457f4853185f5b80fad1d40357
-
SHA512
918697df39acbfc6a128be79d59152d47353070848e4770200d190129377d3356cf30362a11626c890756f1060b29e6ca9a6b4e6c0e0dfb5f436afe96513a70c
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3kO:bIDOw9a0Dwo3P1ojvUSD79RkO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-