General
-
Target
2024-04-28_715425df16cc77215716b9a03eba15d4_cryptolocker
-
Size
52KB
-
Sample
240428-f9yd2shd2s
-
MD5
715425df16cc77215716b9a03eba15d4
-
SHA1
7b32216c40606810b886f31e532afd17c8f5e696
-
SHA256
d3197d8f56518e37052967ca262169278e7a129f7e81181b44cdb46a9f38ba8c
-
SHA512
07634d0bb679697c4da58a835096261497bf7c5a27bca34b7157e36c15ee53255b1b98253d1154ab36602519e7d88f6a36b6d918224748739f2e09a220224d3d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gja:bgGYcA/53GAA6y37Q6dI+d5QGG
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-28_715425df16cc77215716b9a03eba15d4_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-28_715425df16cc77215716b9a03eba15d4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-28_715425df16cc77215716b9a03eba15d4_cryptolocker
-
Size
52KB
-
MD5
715425df16cc77215716b9a03eba15d4
-
SHA1
7b32216c40606810b886f31e532afd17c8f5e696
-
SHA256
d3197d8f56518e37052967ca262169278e7a129f7e81181b44cdb46a9f38ba8c
-
SHA512
07634d0bb679697c4da58a835096261497bf7c5a27bca34b7157e36c15ee53255b1b98253d1154ab36602519e7d88f6a36b6d918224748739f2e09a220224d3d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gja:bgGYcA/53GAA6y37Q6dI+d5QGG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-