General
-
Target
2024-05-10_73bc5b85f2733debac5f442e3758c2ca_cryptolocker
-
Size
40KB
-
Sample
240510-pw6ypsac43
-
MD5
73bc5b85f2733debac5f442e3758c2ca
-
SHA1
452db430d548ae214fea98dbd8af806d7d976d53
-
SHA256
d305673e69ef2f28201b62bd1f57f882f61b593d87780ea2c0b1bda9ea460277
-
SHA512
672226d68aabd83926a32a63d2827bf356eff62b56e5dea8f335d26063c9c290e3edd70ecd2d9da52c1a2e495d0e2438712230a48107da39e4c516ea890bd06b
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwg:bA6YcA/X6G0W143Qg
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_73bc5b85f2733debac5f442e3758c2ca_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-10_73bc5b85f2733debac5f442e3758c2ca_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-10_73bc5b85f2733debac5f442e3758c2ca_cryptolocker
-
Size
40KB
-
MD5
73bc5b85f2733debac5f442e3758c2ca
-
SHA1
452db430d548ae214fea98dbd8af806d7d976d53
-
SHA256
d305673e69ef2f28201b62bd1f57f882f61b593d87780ea2c0b1bda9ea460277
-
SHA512
672226d68aabd83926a32a63d2827bf356eff62b56e5dea8f335d26063c9c290e3edd70ecd2d9da52c1a2e495d0e2438712230a48107da39e4c516ea890bd06b
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwg:bA6YcA/X6G0W143Qg
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-