General
-
Target
2024-04-25_16fbdd4aaf78d3b005db6edfc01bcc25_cryptolocker
-
Size
33KB
-
Sample
240425-cxhahsdh6v
-
MD5
16fbdd4aaf78d3b005db6edfc01bcc25
-
SHA1
15046182bf2e7b0071a54142aade8bbbda2a44eb
-
SHA256
1a0486a6d67ab8ab04c69f5886e16692f1a802bc8f0b79c7c058895635e88374
-
SHA512
8fea81b03b696fd9e4da716a5a149972d9b80e590d27b798a689cc7efb6dd1b97a31b198635696e32d7484634b7d7fdd3ede9e55d211cb889e13c77f2db523cb
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5D:bxNrC7kYo1Fxf2rYP
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_16fbdd4aaf78d3b005db6edfc01bcc25_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_16fbdd4aaf78d3b005db6edfc01bcc25_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-25_16fbdd4aaf78d3b005db6edfc01bcc25_cryptolocker
-
Size
33KB
-
MD5
16fbdd4aaf78d3b005db6edfc01bcc25
-
SHA1
15046182bf2e7b0071a54142aade8bbbda2a44eb
-
SHA256
1a0486a6d67ab8ab04c69f5886e16692f1a802bc8f0b79c7c058895635e88374
-
SHA512
8fea81b03b696fd9e4da716a5a149972d9b80e590d27b798a689cc7efb6dd1b97a31b198635696e32d7484634b7d7fdd3ede9e55d211cb889e13c77f2db523cb
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5D:bxNrC7kYo1Fxf2rYP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-