General
-
Target
2024-04-30_d71e198a6264b96384da91c954ea484f_cryptolocker
-
Size
43KB
-
Sample
240430-bd377sga4z
-
MD5
d71e198a6264b96384da91c954ea484f
-
SHA1
6c9f4afb0c8e966bffb5e1dcf3575555a523ca4f
-
SHA256
6e2b35770fd7212108edd2d8049a3af6172cb9a49a58229cca8235f12efe470b
-
SHA512
d6f034a19200ed594fc01070e5d7c3b2d4b65c5c2f072ee0062e03c4fee3df5cba73c8bb575a1e058d9e0038a96423f23bac0e4e5d42ec77e856a5e7ab15cdd7
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUwp:bm74zYcgT/Ekn0ryfjZp
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_d71e198a6264b96384da91c954ea484f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_d71e198a6264b96384da91c954ea484f_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_d71e198a6264b96384da91c954ea484f_cryptolocker
-
Size
43KB
-
MD5
d71e198a6264b96384da91c954ea484f
-
SHA1
6c9f4afb0c8e966bffb5e1dcf3575555a523ca4f
-
SHA256
6e2b35770fd7212108edd2d8049a3af6172cb9a49a58229cca8235f12efe470b
-
SHA512
d6f034a19200ed594fc01070e5d7c3b2d4b65c5c2f072ee0062e03c4fee3df5cba73c8bb575a1e058d9e0038a96423f23bac0e4e5d42ec77e856a5e7ab15cdd7
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUwp:bm74zYcgT/Ekn0ryfjZp
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-