General
-
Target
2024-04-23_d4e32b29fd08f69ac804abc3a4c0e2ef_cryptolocker
-
Size
48KB
-
Sample
240423-bea8taae65
-
MD5
d4e32b29fd08f69ac804abc3a4c0e2ef
-
SHA1
32bc001120f8b6e0bfe5b581d49471c1289d1447
-
SHA256
48a8c3b9b9ffe11971301a99dea300b339a1e88a1544b7b0ea43f9973711b88d
-
SHA512
201d2434d845234ff1141cb833c2e0997962a919f1570c0cdeda146ac93c27befd2ce65fadfe9aa6a954be925eea9948d55dc285a9f5d7d64c90c52e1f931c9a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddL7:bgGYcA/53GAA6y37Q6dd3
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_d4e32b29fd08f69ac804abc3a4c0e2ef_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-23_d4e32b29fd08f69ac804abc3a4c0e2ef_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_d4e32b29fd08f69ac804abc3a4c0e2ef_cryptolocker
-
Size
48KB
-
MD5
d4e32b29fd08f69ac804abc3a4c0e2ef
-
SHA1
32bc001120f8b6e0bfe5b581d49471c1289d1447
-
SHA256
48a8c3b9b9ffe11971301a99dea300b339a1e88a1544b7b0ea43f9973711b88d
-
SHA512
201d2434d845234ff1141cb833c2e0997962a919f1570c0cdeda146ac93c27befd2ce65fadfe9aa6a954be925eea9948d55dc285a9f5d7d64c90c52e1f931c9a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddL7:bgGYcA/53GAA6y37Q6dd3
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-