General
-
Target
2024-04-29_eb149247ddcc39ae1d20e050af611be9_cryptolocker
-
Size
31KB
-
Sample
240429-lmb57afh21
-
MD5
eb149247ddcc39ae1d20e050af611be9
-
SHA1
bf1384b05a6982c732349eca02fc87079af9cee1
-
SHA256
65bad19ef52a603e5665a3aca6b8a2b131c66a243ae72065df937e51c66fd28f
-
SHA512
7a7d62645bd9bfe542cc1cff0448ac64c8b79035d58bb0a9dee17a4026dda50e24cbd81250a13fada7244bc5accc49b73775c0ce38ae919ad122839623df7825
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGex:bG74zYcgT/Ekd0ryfjt
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_eb149247ddcc39ae1d20e050af611be9_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-29_eb149247ddcc39ae1d20e050af611be9_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-29_eb149247ddcc39ae1d20e050af611be9_cryptolocker
-
Size
31KB
-
MD5
eb149247ddcc39ae1d20e050af611be9
-
SHA1
bf1384b05a6982c732349eca02fc87079af9cee1
-
SHA256
65bad19ef52a603e5665a3aca6b8a2b131c66a243ae72065df937e51c66fd28f
-
SHA512
7a7d62645bd9bfe542cc1cff0448ac64c8b79035d58bb0a9dee17a4026dda50e24cbd81250a13fada7244bc5accc49b73775c0ce38ae919ad122839623df7825
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGex:bG74zYcgT/Ekd0ryfjt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-