General
-
Target
2024-04-26_44a21bf0fd719fb38667066a7f4179fd_cryptolocker
-
Size
61KB
-
Sample
240426-w3ldxaad4z
-
MD5
44a21bf0fd719fb38667066a7f4179fd
-
SHA1
e70d8c80cba7ecec288fa6077df24df64535a027
-
SHA256
6758e504ba1f9fd2725b302d5143955e517816ff92c615a7543c79527f1caf80
-
SHA512
3a90f7221ee827d6dcb6cab2294460fea65467ec1b5aac0f8725bb9a77153700111b5d4f553d46cfc3a9a70b2917cd5b027709fdb44da330397f57075ed9c4f1
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnan:btng54SMLr+/AO/kIhfoKMHda4
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_44a21bf0fd719fb38667066a7f4179fd_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-26_44a21bf0fd719fb38667066a7f4179fd_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_44a21bf0fd719fb38667066a7f4179fd_cryptolocker
-
Size
61KB
-
MD5
44a21bf0fd719fb38667066a7f4179fd
-
SHA1
e70d8c80cba7ecec288fa6077df24df64535a027
-
SHA256
6758e504ba1f9fd2725b302d5143955e517816ff92c615a7543c79527f1caf80
-
SHA512
3a90f7221ee827d6dcb6cab2294460fea65467ec1b5aac0f8725bb9a77153700111b5d4f553d46cfc3a9a70b2917cd5b027709fdb44da330397f57075ed9c4f1
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnan:btng54SMLr+/AO/kIhfoKMHda4
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-