General
-
Target
2024-05-09_03deb7ca35d69f44103eb4854357b1e1_cryptolocker
-
Size
40KB
-
Sample
240509-y4634sfg56
-
MD5
03deb7ca35d69f44103eb4854357b1e1
-
SHA1
240e812a368ed9bc6635017fcfbb3faf68ead3e9
-
SHA256
46241eefb9ba2c99e9bd08dee89735dc35615dc026eff73515a1a0f3d54d642e
-
SHA512
4244c760aeda58a4fd1db3b3b60a32c3fc794d5d26535b89b315cf3454781b615a414ae753940f63d997a852d7fa724915afa21b5dd93a71a8861809269cd8e9
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pimGZ3V:bAvJCF+RQgJeab4sTsl
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_03deb7ca35d69f44103eb4854357b1e1_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-09_03deb7ca35d69f44103eb4854357b1e1_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-09_03deb7ca35d69f44103eb4854357b1e1_cryptolocker
-
Size
40KB
-
MD5
03deb7ca35d69f44103eb4854357b1e1
-
SHA1
240e812a368ed9bc6635017fcfbb3faf68ead3e9
-
SHA256
46241eefb9ba2c99e9bd08dee89735dc35615dc026eff73515a1a0f3d54d642e
-
SHA512
4244c760aeda58a4fd1db3b3b60a32c3fc794d5d26535b89b315cf3454781b615a414ae753940f63d997a852d7fa724915afa21b5dd93a71a8861809269cd8e9
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pimGZ3V:bAvJCF+RQgJeab4sTsl
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-