General
-
Target
2024-04-27_2bf44785abaef20657fceeae6db4c81a_cryptolocker
-
Size
41KB
-
Sample
240427-ct4pcahb44
-
MD5
2bf44785abaef20657fceeae6db4c81a
-
SHA1
452cd8ad1081adb68120fb7344af058395185cb2
-
SHA256
11a68381597a59ff3f9f87f7b28d95d48edb6627da6010e70035dbc28116ec4b
-
SHA512
af81da0bbf3a54062291fbabc0bbf9c0dbea2f440c04265d83264c5b38e7cfc93d69b7039cc68de964041abd83460705829c46efbcf6e9a7eb839e6b61cd553d
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAk:bCDOw9aMDooc+vAk
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_2bf44785abaef20657fceeae6db4c81a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_2bf44785abaef20657fceeae6db4c81a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-27_2bf44785abaef20657fceeae6db4c81a_cryptolocker
-
Size
41KB
-
MD5
2bf44785abaef20657fceeae6db4c81a
-
SHA1
452cd8ad1081adb68120fb7344af058395185cb2
-
SHA256
11a68381597a59ff3f9f87f7b28d95d48edb6627da6010e70035dbc28116ec4b
-
SHA512
af81da0bbf3a54062291fbabc0bbf9c0dbea2f440c04265d83264c5b38e7cfc93d69b7039cc68de964041abd83460705829c46efbcf6e9a7eb839e6b61cd553d
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAk:bCDOw9aMDooc+vAk
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-