General
-
Target
2024-04-26_a14df5f9701aef56ed47246ecc3736a2_cryptolocker
-
Size
37KB
-
Sample
240426-ejhegahg55
-
MD5
a14df5f9701aef56ed47246ecc3736a2
-
SHA1
b377b6f64639d8dca5a05daa87d51a85880809aa
-
SHA256
abc43a6bd6d1d0bb167bb8c7fed7849658a41ce034382fb4f77b366506507736
-
SHA512
49d33c17c4d2f142822c5570e6530fe5a32eb857a5f79c1cebe2721e40eb625de18cd9bc908aa20c9608a239b1ee89d5d3168cef57b2005b77a407e1b89dd386
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mc:bc/y2lLRU6zA6qc
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_a14df5f9701aef56ed47246ecc3736a2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_a14df5f9701aef56ed47246ecc3736a2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-26_a14df5f9701aef56ed47246ecc3736a2_cryptolocker
-
Size
37KB
-
MD5
a14df5f9701aef56ed47246ecc3736a2
-
SHA1
b377b6f64639d8dca5a05daa87d51a85880809aa
-
SHA256
abc43a6bd6d1d0bb167bb8c7fed7849658a41ce034382fb4f77b366506507736
-
SHA512
49d33c17c4d2f142822c5570e6530fe5a32eb857a5f79c1cebe2721e40eb625de18cd9bc908aa20c9608a239b1ee89d5d3168cef57b2005b77a407e1b89dd386
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mc:bc/y2lLRU6zA6qc
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-