General
-
Target
2024-05-09_707a507c58929c909e71e6d9e3900a73_cryptolocker
-
Size
34KB
-
Sample
240509-1wpvzaca79
-
MD5
707a507c58929c909e71e6d9e3900a73
-
SHA1
9ebf9025dd6fa667958ce24f19ddb7b1009fcf95
-
SHA256
8756264e5946e06651fbb3e1b554e0d93a5702486270bc841b8765efdc1fe588
-
SHA512
7b9edb4075f282a334607300390bedaafb950e24f859231750b87225855a98319009d8294513beb97ebaa3305e8acb52a7cca034ff643c98f866b36fb3014e0a
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp70Q:bxNrC7kYo1Fxf2rY1t
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_707a507c58929c909e71e6d9e3900a73_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-09_707a507c58929c909e71e6d9e3900a73_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_707a507c58929c909e71e6d9e3900a73_cryptolocker
-
Size
34KB
-
MD5
707a507c58929c909e71e6d9e3900a73
-
SHA1
9ebf9025dd6fa667958ce24f19ddb7b1009fcf95
-
SHA256
8756264e5946e06651fbb3e1b554e0d93a5702486270bc841b8765efdc1fe588
-
SHA512
7b9edb4075f282a334607300390bedaafb950e24f859231750b87225855a98319009d8294513beb97ebaa3305e8acb52a7cca034ff643c98f866b36fb3014e0a
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp70Q:bxNrC7kYo1Fxf2rY1t
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-