General
-
Target
2024-04-29_395d3835dac281addc6c0af2b3a4b556_cryptolocker
-
Size
63KB
-
Sample
240429-e444zaac74
-
MD5
395d3835dac281addc6c0af2b3a4b556
-
SHA1
922ef62240aea3fe6c7511cf244f5b9885c4aa66
-
SHA256
6e05f789dd61cfe5484b6f63ebcb6cba97715d800c13c2f1ea930ae3202f444d
-
SHA512
536e4f988106706e642aeae5d18c4c7dd2ceb5bb590f74955ea1925424d87d895cb2aeb2d8a3d053b9347b45f0ee0710c1d95d3a7d8c5e24d159f4483e3185ef
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaxq:btng54SMLr+/AO/kIhfoKMHdPq
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_395d3835dac281addc6c0af2b3a4b556_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-29_395d3835dac281addc6c0af2b3a4b556_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_395d3835dac281addc6c0af2b3a4b556_cryptolocker
-
Size
63KB
-
MD5
395d3835dac281addc6c0af2b3a4b556
-
SHA1
922ef62240aea3fe6c7511cf244f5b9885c4aa66
-
SHA256
6e05f789dd61cfe5484b6f63ebcb6cba97715d800c13c2f1ea930ae3202f444d
-
SHA512
536e4f988106706e642aeae5d18c4c7dd2ceb5bb590f74955ea1925424d87d895cb2aeb2d8a3d053b9347b45f0ee0710c1d95d3a7d8c5e24d159f4483e3185ef
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaxq:btng54SMLr+/AO/kIhfoKMHdPq
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-