General
-
Target
2024-05-11_cfdfefa7cfc92e75be30d2d40686e386_cryptolocker
-
Size
44KB
-
Sample
240511-szs3ssdf7x
-
MD5
cfdfefa7cfc92e75be30d2d40686e386
-
SHA1
e8b1c3c9d85f12c984f8e3a513003a640680c866
-
SHA256
f394ce196dbfce1b07e969b6578ce843ed68e3f9db73bae1b0e8e166e3fc320f
-
SHA512
aa2deb9cb912be0f50d5e41ae5ad7a641ff0c9b8ef200555512c5312a59fd61a5b122d332b25ce84fa2e607c0fb67df8b3604ab852a19a25741fd0fbdc9e32bb
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIIy:bm74zYcgT/Ekn0ryfjUy
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_cfdfefa7cfc92e75be30d2d40686e386_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-11_cfdfefa7cfc92e75be30d2d40686e386_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-11_cfdfefa7cfc92e75be30d2d40686e386_cryptolocker
-
Size
44KB
-
MD5
cfdfefa7cfc92e75be30d2d40686e386
-
SHA1
e8b1c3c9d85f12c984f8e3a513003a640680c866
-
SHA256
f394ce196dbfce1b07e969b6578ce843ed68e3f9db73bae1b0e8e166e3fc320f
-
SHA512
aa2deb9cb912be0f50d5e41ae5ad7a641ff0c9b8ef200555512c5312a59fd61a5b122d332b25ce84fa2e607c0fb67df8b3604ab852a19a25741fd0fbdc9e32bb
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIIy:bm74zYcgT/Ekn0ryfjUy
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-