General
-
Target
2024-05-13_e4fc79559e2a4066df0a2f75acef94a2_cryptolocker
-
Size
35KB
-
Sample
240513-yk7wasbe6y
-
MD5
e4fc79559e2a4066df0a2f75acef94a2
-
SHA1
fdb4ba6e53f58be33e9a2dbe570325f13fb4e4b4
-
SHA256
a7ebf10020dc22c8dffd4f60b8a03b81cde63dde1d68edbe12851036a8872873
-
SHA512
f37b0d0b219a6148cbdfe04175472dc1d103c902376ad96e530e08be81a4bc15666f10b0e0ef72081bd146094afbad780ed9638c3d5b6defe8c07f989e33a664
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZ/:bA74zYcgT/Ekd0ryfjPIunqpeNswm6B
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-13_e4fc79559e2a4066df0a2f75acef94a2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-13_e4fc79559e2a4066df0a2f75acef94a2_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-13_e4fc79559e2a4066df0a2f75acef94a2_cryptolocker
-
Size
35KB
-
MD5
e4fc79559e2a4066df0a2f75acef94a2
-
SHA1
fdb4ba6e53f58be33e9a2dbe570325f13fb4e4b4
-
SHA256
a7ebf10020dc22c8dffd4f60b8a03b81cde63dde1d68edbe12851036a8872873
-
SHA512
f37b0d0b219a6148cbdfe04175472dc1d103c902376ad96e530e08be81a4bc15666f10b0e0ef72081bd146094afbad780ed9638c3d5b6defe8c07f989e33a664
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZ/:bA74zYcgT/Ekd0ryfjPIunqpeNswm6B
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-