General
-
Target
2024-04-27_a356731f408f20ac1fac066cc3bcf006_cryptolocker
-
Size
53KB
-
Sample
240427-2ke23aab54
-
MD5
a356731f408f20ac1fac066cc3bcf006
-
SHA1
9fe9fa197ff40d9b22dc1a5254bc9d002d7d2d2b
-
SHA256
7f857993b0972c9eee37ca1d84504f210c570313f2766c20fdf05784f8b193c4
-
SHA512
01dad827eeabd440b6dd80ef0f707bfa53e901e96ae78194ec1b50e82db72d4aedf1a0c7c846b243f06ea175d8f1bfe85aed8c079e0dfdbec0bce07a1cd52c0e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gjh:bgGYcA/53GAA6y37Q6dI+d5QGV
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_a356731f408f20ac1fac066cc3bcf006_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-27_a356731f408f20ac1fac066cc3bcf006_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-27_a356731f408f20ac1fac066cc3bcf006_cryptolocker
-
Size
53KB
-
MD5
a356731f408f20ac1fac066cc3bcf006
-
SHA1
9fe9fa197ff40d9b22dc1a5254bc9d002d7d2d2b
-
SHA256
7f857993b0972c9eee37ca1d84504f210c570313f2766c20fdf05784f8b193c4
-
SHA512
01dad827eeabd440b6dd80ef0f707bfa53e901e96ae78194ec1b50e82db72d4aedf1a0c7c846b243f06ea175d8f1bfe85aed8c079e0dfdbec0bce07a1cd52c0e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gjh:bgGYcA/53GAA6y37Q6dI+d5QGV
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-