General
-
Target
2024-04-29_88c43b9915fc1a7b2f67fc8aa9b014dc_cryptolocker
-
Size
60KB
-
Sample
240429-tw3cqsfb39
-
MD5
88c43b9915fc1a7b2f67fc8aa9b014dc
-
SHA1
8a54db969a2f4f5971aa4e791d10a177c5b73cf2
-
SHA256
c8eefc92d1c94c7a0ef25a3c26be09b1534e57c453ce8f9901ab4db6419f373e
-
SHA512
0b0315c359ebcfc378c1e37cda60db182b9702f536929e2e3916fb71e86559495dd121ac94698f100d37e1ae119061d3bccdeef2d4b86a878c7417520133c765
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnK:btng54SMLr+/AO/kIhfoKMHdaK
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_88c43b9915fc1a7b2f67fc8aa9b014dc_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-04-29_88c43b9915fc1a7b2f67fc8aa9b014dc_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-29_88c43b9915fc1a7b2f67fc8aa9b014dc_cryptolocker
-
Size
60KB
-
MD5
88c43b9915fc1a7b2f67fc8aa9b014dc
-
SHA1
8a54db969a2f4f5971aa4e791d10a177c5b73cf2
-
SHA256
c8eefc92d1c94c7a0ef25a3c26be09b1534e57c453ce8f9901ab4db6419f373e
-
SHA512
0b0315c359ebcfc378c1e37cda60db182b9702f536929e2e3916fb71e86559495dd121ac94698f100d37e1ae119061d3bccdeef2d4b86a878c7417520133c765
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnK:btng54SMLr+/AO/kIhfoKMHdaK
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-