General
-
Target
2024-04-24_d704053a426f41f6e31b62126f4c7d74_cryptolocker
-
Size
29KB
-
Sample
240424-wkvvmaed61
-
MD5
d704053a426f41f6e31b62126f4c7d74
-
SHA1
a6c748b5e0d1ea59e509126e507b93697b873774
-
SHA256
7e648da49713aec15d0c338ba9f8a53d1694708a72e7c16a5b68000504529c7d
-
SHA512
5cce824340f9b4778b7b526303d7d565c68a4f53cc3f8223dcbbb7f4f3c4498a9a52ab71abf0208620ac2cbeb4b8563281c53ffb96fa88e37524a94d1c5d7b7f
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfb:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X6
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_d704053a426f41f6e31b62126f4c7d74_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_d704053a426f41f6e31b62126f4c7d74_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_d704053a426f41f6e31b62126f4c7d74_cryptolocker
-
Size
29KB
-
MD5
d704053a426f41f6e31b62126f4c7d74
-
SHA1
a6c748b5e0d1ea59e509126e507b93697b873774
-
SHA256
7e648da49713aec15d0c338ba9f8a53d1694708a72e7c16a5b68000504529c7d
-
SHA512
5cce824340f9b4778b7b526303d7d565c68a4f53cc3f8223dcbbb7f4f3c4498a9a52ab71abf0208620ac2cbeb4b8563281c53ffb96fa88e37524a94d1c5d7b7f
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfb:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X6
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-