General
-
Target
2024-05-09_3fab226e2695d745a4c7b2606eff16e8_cryptolocker
-
Size
42KB
-
Sample
240509-xdjz8ahb7v
-
MD5
3fab226e2695d745a4c7b2606eff16e8
-
SHA1
fb69460381e3c1995aa971cf715a46580493004b
-
SHA256
5465b5102fe150c2295e1b71b0cf9bd95b7abe7c81e3a153655ab3d6e8a3679a
-
SHA512
74970c2167e02d502e4a81489c3f8f02a43059a3174ea3bceaf3d7941f7e2aa74f2433ceabc97e3d5aa38e476d7e52a42e1610fb48b3659326cc06f346cc955f
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydI:bCDOw9aMDooc+vAym
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_3fab226e2695d745a4c7b2606eff16e8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-09_3fab226e2695d745a4c7b2606eff16e8_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_3fab226e2695d745a4c7b2606eff16e8_cryptolocker
-
Size
42KB
-
MD5
3fab226e2695d745a4c7b2606eff16e8
-
SHA1
fb69460381e3c1995aa971cf715a46580493004b
-
SHA256
5465b5102fe150c2295e1b71b0cf9bd95b7abe7c81e3a153655ab3d6e8a3679a
-
SHA512
74970c2167e02d502e4a81489c3f8f02a43059a3174ea3bceaf3d7941f7e2aa74f2433ceabc97e3d5aa38e476d7e52a42e1610fb48b3659326cc06f346cc955f
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydI:bCDOw9aMDooc+vAym
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-