General
-
Target
2024-04-27_f988fa09b0978e2ca8753908682ca373_cryptolocker
-
Size
41KB
-
Sample
240427-czx4raab21
-
MD5
f988fa09b0978e2ca8753908682ca373
-
SHA1
d4df96ac918bf475fde260b0955f144942d2c1b7
-
SHA256
e2bcd53530c2502034e9fa10e3d97f3bdf5cefc0ba6204e85ce415e84608ad62
-
SHA512
e45b7d90cd022a4a9b942f9c10d92d24e1769acefab6b7cc85057733a0919c9573b203ef596d45a8169d8a3f6df42ff7ca6014f8846384b08e8723d40d60a2f5
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAc:bCDOw9aMDooc+vAc
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_f988fa09b0978e2ca8753908682ca373_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-27_f988fa09b0978e2ca8753908682ca373_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-27_f988fa09b0978e2ca8753908682ca373_cryptolocker
-
Size
41KB
-
MD5
f988fa09b0978e2ca8753908682ca373
-
SHA1
d4df96ac918bf475fde260b0955f144942d2c1b7
-
SHA256
e2bcd53530c2502034e9fa10e3d97f3bdf5cefc0ba6204e85ce415e84608ad62
-
SHA512
e45b7d90cd022a4a9b942f9c10d92d24e1769acefab6b7cc85057733a0919c9573b203ef596d45a8169d8a3f6df42ff7ca6014f8846384b08e8723d40d60a2f5
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAc:bCDOw9aMDooc+vAc
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-