General
-
Target
2024-05-11_fad09af04db74d5e8b180c7ca45bfd9f_cryptolocker
-
Size
36KB
-
Sample
240511-jvsrssaa29
-
MD5
fad09af04db74d5e8b180c7ca45bfd9f
-
SHA1
e778c3ddadbf9817593fdba3c680af31c77af748
-
SHA256
d3ca24dfffb21afbd6fe68ecb37071ddaaffa21f731917aaf99462454c6d6141
-
SHA512
b47b7a0b42b1156404e04086d57d171b69fdb0719c63ec5bb75fb8c51806465e973684a8ed7db53adb70f2a62d052ffc27cb99ef9bc619a1676f0523abce70f7
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZQx:bgX4zYcgTEu6QOaryfjqDDw3sCu5lx
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_fad09af04db74d5e8b180c7ca45bfd9f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-11_fad09af04db74d5e8b180c7ca45bfd9f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-11_fad09af04db74d5e8b180c7ca45bfd9f_cryptolocker
-
Size
36KB
-
MD5
fad09af04db74d5e8b180c7ca45bfd9f
-
SHA1
e778c3ddadbf9817593fdba3c680af31c77af748
-
SHA256
d3ca24dfffb21afbd6fe68ecb37071ddaaffa21f731917aaf99462454c6d6141
-
SHA512
b47b7a0b42b1156404e04086d57d171b69fdb0719c63ec5bb75fb8c51806465e973684a8ed7db53adb70f2a62d052ffc27cb99ef9bc619a1676f0523abce70f7
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZQx:bgX4zYcgTEu6QOaryfjqDDw3sCu5lx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-