General
-
Target
2024-04-29_b7aee36fe1263e54025127668bccbf4a_cryptolocker
-
Size
41KB
-
Sample
240429-12jadada6x
-
MD5
b7aee36fe1263e54025127668bccbf4a
-
SHA1
b1fa28fd856c7be7aeb9d34b519477c9e5404a1a
-
SHA256
31ebe5ca646dc97c741a9fbdfc00c76188f9736d3416b23c76668be62bdcc7cd
-
SHA512
05850e9069fb439b03824fdffe195f41d8c38d2a8a253cdacf04ef0ba9659a08c50b21b78353cf1e7569dc0c5a6eae7ee423cfc76dd3c39b63adfd88a3f4a14a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAXt:bCDOw9aMDooc+vAXt
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_b7aee36fe1263e54025127668bccbf4a_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-04-29_b7aee36fe1263e54025127668bccbf4a_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_b7aee36fe1263e54025127668bccbf4a_cryptolocker
-
Size
41KB
-
MD5
b7aee36fe1263e54025127668bccbf4a
-
SHA1
b1fa28fd856c7be7aeb9d34b519477c9e5404a1a
-
SHA256
31ebe5ca646dc97c741a9fbdfc00c76188f9736d3416b23c76668be62bdcc7cd
-
SHA512
05850e9069fb439b03824fdffe195f41d8c38d2a8a253cdacf04ef0ba9659a08c50b21b78353cf1e7569dc0c5a6eae7ee423cfc76dd3c39b63adfd88a3f4a14a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAXt:bCDOw9aMDooc+vAXt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-