General
-
Target
2024-04-26_29d046dd0185409897b0f2e806a654c3_cryptolocker
-
Size
41KB
-
Sample
240426-e5ssbsaa45
-
MD5
29d046dd0185409897b0f2e806a654c3
-
SHA1
b0247c35352205bd5f61d8a3c5393dd2147a8f46
-
SHA256
f7432d5636e4d5febe687f8cc634d73f02fca1f7232c2b8ffe1bd921e231d0a2
-
SHA512
31e7ab8ad08695c7b2fa4619a7ece7bf958605492932f944a474e68b726e46455954e5d385b83f5faa3e55b6c4d07822ef3f081160f67373056e24a57c43e257
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAXq:bCDOw9aMDooc+vAXq
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_29d046dd0185409897b0f2e806a654c3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_29d046dd0185409897b0f2e806a654c3_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-26_29d046dd0185409897b0f2e806a654c3_cryptolocker
-
Size
41KB
-
MD5
29d046dd0185409897b0f2e806a654c3
-
SHA1
b0247c35352205bd5f61d8a3c5393dd2147a8f46
-
SHA256
f7432d5636e4d5febe687f8cc634d73f02fca1f7232c2b8ffe1bd921e231d0a2
-
SHA512
31e7ab8ad08695c7b2fa4619a7ece7bf958605492932f944a474e68b726e46455954e5d385b83f5faa3e55b6c4d07822ef3f081160f67373056e24a57c43e257
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAXq:bCDOw9aMDooc+vAXq
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-