General
-
Target
2024-04-22_07b223620ed01697e46282f6bc64658d_cryptolocker
-
Size
48KB
-
Sample
240422-z9vgyage52
-
MD5
07b223620ed01697e46282f6bc64658d
-
SHA1
b990a42634a073974779f553687752eb28dc8416
-
SHA256
42f4061c9a00e464f780481e0ac90045095ec782c678412148027ee62b992716
-
SHA512
41e0cfb3843125231c3507b13d9de84673c2333bf8cabea1d667824957cf5705335be16d09f5e345f629709d697dd835235b916d60ca8af752ed21dc233e9d6f
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddLw:bgGYcA/53GAA6y37Q6dds
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_07b223620ed01697e46282f6bc64658d_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-22_07b223620ed01697e46282f6bc64658d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-22_07b223620ed01697e46282f6bc64658d_cryptolocker
-
Size
48KB
-
MD5
07b223620ed01697e46282f6bc64658d
-
SHA1
b990a42634a073974779f553687752eb28dc8416
-
SHA256
42f4061c9a00e464f780481e0ac90045095ec782c678412148027ee62b992716
-
SHA512
41e0cfb3843125231c3507b13d9de84673c2333bf8cabea1d667824957cf5705335be16d09f5e345f629709d697dd835235b916d60ca8af752ed21dc233e9d6f
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddLw:bgGYcA/53GAA6y37Q6dds
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-