General
-
Target
2024-04-29_c3edfc278fa0ee64c19e765f3820ceec_cryptolocker
-
Size
54KB
-
Sample
240429-3v4zlsea89
-
MD5
c3edfc278fa0ee64c19e765f3820ceec
-
SHA1
8e98dfc1653f07bd41a4b2511a972472d592b4a1
-
SHA256
406fc3b51d16cdee72eff7a43f7dfd7d2ff220803323484ba3ca74bc000d1b66
-
SHA512
63d290da2a1812c324660831a801b80605c8dbff884788cd4aea8d27f2252205d67047fef829cbb9400a5387feed0d96cd2674cdf91e50a8a2570bbe05f2678b
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbqjasqS:bIDOw9a0DwitDZzcTmL
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_c3edfc278fa0ee64c19e765f3820ceec_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-29_c3edfc278fa0ee64c19e765f3820ceec_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_c3edfc278fa0ee64c19e765f3820ceec_cryptolocker
-
Size
54KB
-
MD5
c3edfc278fa0ee64c19e765f3820ceec
-
SHA1
8e98dfc1653f07bd41a4b2511a972472d592b4a1
-
SHA256
406fc3b51d16cdee72eff7a43f7dfd7d2ff220803323484ba3ca74bc000d1b66
-
SHA512
63d290da2a1812c324660831a801b80605c8dbff884788cd4aea8d27f2252205d67047fef829cbb9400a5387feed0d96cd2674cdf91e50a8a2570bbe05f2678b
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbqjasqS:bIDOw9a0DwitDZzcTmL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-