General
-
Target
2024-05-02_8706cb78f7afbbea76258935f5cb8b5e_cryptolocker
-
Size
41KB
-
Sample
240502-a971laec97
-
MD5
8706cb78f7afbbea76258935f5cb8b5e
-
SHA1
d1965545b9f43dd322ba7a5a7c915420b499fce5
-
SHA256
9ef300a10241eed1c6f0c875467fae2254fb2f14568b8fe71261646481a2135b
-
SHA512
85e3949b019fa33c4a329a2aef62b020b718e56af079d785ff9a318428dd27f857bd01fdf5b1f805a06e527bb9cf859303403b99a33200a0c48cfd6c08060f65
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAU:bCDOw9aMDooc+vAU
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_8706cb78f7afbbea76258935f5cb8b5e_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-02_8706cb78f7afbbea76258935f5cb8b5e_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-02_8706cb78f7afbbea76258935f5cb8b5e_cryptolocker
-
Size
41KB
-
MD5
8706cb78f7afbbea76258935f5cb8b5e
-
SHA1
d1965545b9f43dd322ba7a5a7c915420b499fce5
-
SHA256
9ef300a10241eed1c6f0c875467fae2254fb2f14568b8fe71261646481a2135b
-
SHA512
85e3949b019fa33c4a329a2aef62b020b718e56af079d785ff9a318428dd27f857bd01fdf5b1f805a06e527bb9cf859303403b99a33200a0c48cfd6c08060f65
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAU:bCDOw9aMDooc+vAU
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-