General
-
Target
2024-04-24_770b0ac1605cbd2fddedb0ae6d10a6b9_cryptolocker
-
Size
36KB
-
Sample
240424-v9l4caeb34
-
MD5
770b0ac1605cbd2fddedb0ae6d10a6b9
-
SHA1
f3030f5debc99998f3858c4fb14276bf8d35c496
-
SHA256
3ea9dd40fc3dc3a259c640615921bc5ba2ddd1b01d1508dcaacc9d739b908200
-
SHA512
be0cd0ce6166e9e1f9aaf3ec76f96f469b22becf2d40b18ac8d7e77bb1ec1835ad5cc655335ffa297edd03a5fbfec361ad74d19694815b29ab6c230ba8c5ba61
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY26J:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36J
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_770b0ac1605cbd2fddedb0ae6d10a6b9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_770b0ac1605cbd2fddedb0ae6d10a6b9_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_770b0ac1605cbd2fddedb0ae6d10a6b9_cryptolocker
-
Size
36KB
-
MD5
770b0ac1605cbd2fddedb0ae6d10a6b9
-
SHA1
f3030f5debc99998f3858c4fb14276bf8d35c496
-
SHA256
3ea9dd40fc3dc3a259c640615921bc5ba2ddd1b01d1508dcaacc9d739b908200
-
SHA512
be0cd0ce6166e9e1f9aaf3ec76f96f469b22becf2d40b18ac8d7e77bb1ec1835ad5cc655335ffa297edd03a5fbfec361ad74d19694815b29ab6c230ba8c5ba61
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY26J:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36J
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-