General
-
Target
2024-04-23_07ab039226177d757a26653eea5041c6_cryptolocker
-
Size
31KB
-
Sample
240423-dxvfhscd4z
-
MD5
07ab039226177d757a26653eea5041c6
-
SHA1
ae0cdb257fa4d6e108d101cb2f02e11851898a7b
-
SHA256
e22d0a88fe1866986488fb61eee0a84653c6ed3209608f25ae1c08d91b8fb608
-
SHA512
72e704d2ea34ee86e8d9931e3204db66fa48d4e4dc68f74e694c233781c868938b2381f84cba52fce949a9cd5ad737b63d535810169935d4438315c895e04588
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGSWLx:bG74zYcgT/Ekd0ryfjcl
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_07ab039226177d757a26653eea5041c6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-23_07ab039226177d757a26653eea5041c6_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_07ab039226177d757a26653eea5041c6_cryptolocker
-
Size
31KB
-
MD5
07ab039226177d757a26653eea5041c6
-
SHA1
ae0cdb257fa4d6e108d101cb2f02e11851898a7b
-
SHA256
e22d0a88fe1866986488fb61eee0a84653c6ed3209608f25ae1c08d91b8fb608
-
SHA512
72e704d2ea34ee86e8d9931e3204db66fa48d4e4dc68f74e694c233781c868938b2381f84cba52fce949a9cd5ad737b63d535810169935d4438315c895e04588
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGSWLx:bG74zYcgT/Ekd0ryfjcl
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-