General
-
Target
2024-04-30_d69bed0a5206564d59d68d2a8c034c1a_cryptolocker
-
Size
41KB
-
Sample
240430-tjpacace58
-
MD5
d69bed0a5206564d59d68d2a8c034c1a
-
SHA1
956b744b98a74f10699a45839406066678df8728
-
SHA256
d846ea269dfce3032e8cb5e14f47d5e92ba04e0dc894e57fc9d51777e861edbb
-
SHA512
99cb96a729672425d8988dd8f42851212d122663e7ec0cb83029da477bc8032a2a0c298a94c74c1d94dcd4caf994d55cea67e94b1ad0a35b70d2d4913a899a90
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAO:bCDOw9aMDooc+vAO
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_d69bed0a5206564d59d68d2a8c034c1a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-30_d69bed0a5206564d59d68d2a8c034c1a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-30_d69bed0a5206564d59d68d2a8c034c1a_cryptolocker
-
Size
41KB
-
MD5
d69bed0a5206564d59d68d2a8c034c1a
-
SHA1
956b744b98a74f10699a45839406066678df8728
-
SHA256
d846ea269dfce3032e8cb5e14f47d5e92ba04e0dc894e57fc9d51777e861edbb
-
SHA512
99cb96a729672425d8988dd8f42851212d122663e7ec0cb83029da477bc8032a2a0c298a94c74c1d94dcd4caf994d55cea67e94b1ad0a35b70d2d4913a899a90
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAO:bCDOw9aMDooc+vAO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-