General
-
Target
2024-05-14_18f9aa9fd9ab3f041cc5122b388b4b05_cryptolocker
-
Size
32KB
-
Sample
240514-d2xfnshf44
-
MD5
18f9aa9fd9ab3f041cc5122b388b4b05
-
SHA1
1cb4c34e22984b165d7fdf0083e4377801d80c8b
-
SHA256
5d330f8357a45634dad2962795690fe14775c8a0ae5ab6adef425513efba9bc3
-
SHA512
782b9066f1f3a3a702c0a40a1a5f6551ed10885d153aabfe3edc788c155a6ec770d8e4e06cf09c55867777125ac3c7c27225d58e12413d0acc5ca625ce29e87f
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuY:bG74zYcgT/Ekd0ryfjU
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-14_18f9aa9fd9ab3f041cc5122b388b4b05_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-14_18f9aa9fd9ab3f041cc5122b388b4b05_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-14_18f9aa9fd9ab3f041cc5122b388b4b05_cryptolocker
-
Size
32KB
-
MD5
18f9aa9fd9ab3f041cc5122b388b4b05
-
SHA1
1cb4c34e22984b165d7fdf0083e4377801d80c8b
-
SHA256
5d330f8357a45634dad2962795690fe14775c8a0ae5ab6adef425513efba9bc3
-
SHA512
782b9066f1f3a3a702c0a40a1a5f6551ed10885d153aabfe3edc788c155a6ec770d8e4e06cf09c55867777125ac3c7c27225d58e12413d0acc5ca625ce29e87f
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuY:bG74zYcgT/Ekd0ryfjU
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-