General
-
Target
2024-04-24_9683b4427c01bf9676d7ec2b6d902960_cryptolocker
-
Size
41KB
-
Sample
240424-bws5ysdf8y
-
MD5
9683b4427c01bf9676d7ec2b6d902960
-
SHA1
00c24050ed8fa8f13030e8f1a3b224a7dffee87c
-
SHA256
de843f6c7adebe8ccd59acda7dd196b133172bc2e922014d918650cfb1a81f61
-
SHA512
c29badb06f42dca2b19d420e0f735fe5eb80b221c3bb5f0fb2a15f12269576d0b453cd3d8f03f98f11a72ad45919bb263296cc741f0a6ae64437ad15f0b5758a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA2:bCDOw9aMDooc+vA2
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_9683b4427c01bf9676d7ec2b6d902960_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_9683b4427c01bf9676d7ec2b6d902960_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_9683b4427c01bf9676d7ec2b6d902960_cryptolocker
-
Size
41KB
-
MD5
9683b4427c01bf9676d7ec2b6d902960
-
SHA1
00c24050ed8fa8f13030e8f1a3b224a7dffee87c
-
SHA256
de843f6c7adebe8ccd59acda7dd196b133172bc2e922014d918650cfb1a81f61
-
SHA512
c29badb06f42dca2b19d420e0f735fe5eb80b221c3bb5f0fb2a15f12269576d0b453cd3d8f03f98f11a72ad45919bb263296cc741f0a6ae64437ad15f0b5758a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtA2:bCDOw9aMDooc+vA2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-