General
-
Target
2024-04-27_630478e1e963e7ac5b33b87e283fbd45_cryptolocker
-
Size
52KB
-
Sample
240427-x9x7qafc6x
-
MD5
630478e1e963e7ac5b33b87e283fbd45
-
SHA1
fbbb72cdac09cbacd18283ca7c944a9bf8dac386
-
SHA256
f62509281058dc7cf1ac266e642fa4bcd3e918bc4b15bfb3134fa5eefd6296c8
-
SHA512
b062e5fea7f92d91a8177e5abccc498e71c47235b9f65f247e6e362056af5bed79df84e3bb816e185a22bdfbf264e61ad47f5cf6376e98d9196bf37693528923
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gj5:bgGYcA/53GAA6y37Q6dI+d5QGt
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_630478e1e963e7ac5b33b87e283fbd45_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_630478e1e963e7ac5b33b87e283fbd45_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_630478e1e963e7ac5b33b87e283fbd45_cryptolocker
-
Size
52KB
-
MD5
630478e1e963e7ac5b33b87e283fbd45
-
SHA1
fbbb72cdac09cbacd18283ca7c944a9bf8dac386
-
SHA256
f62509281058dc7cf1ac266e642fa4bcd3e918bc4b15bfb3134fa5eefd6296c8
-
SHA512
b062e5fea7f92d91a8177e5abccc498e71c47235b9f65f247e6e362056af5bed79df84e3bb816e185a22bdfbf264e61ad47f5cf6376e98d9196bf37693528923
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gj5:bgGYcA/53GAA6y37Q6dI+d5QGt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-