General
-
Target
2024-04-26_9749a6f1af1757b24651132caa3e1f51_cryptolocker
-
Size
36KB
-
Sample
240426-kdfxcacg3t
-
MD5
9749a6f1af1757b24651132caa3e1f51
-
SHA1
85e84b994589decce315152c971c2706bcc9a1c5
-
SHA256
cd9efc0eebd4f7eb532723f9c21d888bfe81053a81abb7261660269275c64cae
-
SHA512
8b5a61f7ad6bdca2e80824417829b6366243ed0ff5177c3de6fbf089112d4145cec81ee2ef032888d30ab79fa7445a91fbe55e18f3a449d1a560bc5a0914b978
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/u:fT+hsMQMOtEvwDpjoIHm
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_9749a6f1af1757b24651132caa3e1f51_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_9749a6f1af1757b24651132caa3e1f51_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-26_9749a6f1af1757b24651132caa3e1f51_cryptolocker
-
Size
36KB
-
MD5
9749a6f1af1757b24651132caa3e1f51
-
SHA1
85e84b994589decce315152c971c2706bcc9a1c5
-
SHA256
cd9efc0eebd4f7eb532723f9c21d888bfe81053a81abb7261660269275c64cae
-
SHA512
8b5a61f7ad6bdca2e80824417829b6366243ed0ff5177c3de6fbf089112d4145cec81ee2ef032888d30ab79fa7445a91fbe55e18f3a449d1a560bc5a0914b978
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/u:fT+hsMQMOtEvwDpjoIHm
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-