General
-
Target
2024-05-14_679ee8d59962521d3f720d8e1fa76ce6_cryptolocker
-
Size
44KB
-
Sample
240514-vmf9ksfg64
-
MD5
679ee8d59962521d3f720d8e1fa76ce6
-
SHA1
366bac5a975c44d4c3abfd632bf2e5507cb3d765
-
SHA256
4a0d870518bacea1cb1e73759e15eab76b42adae14e3f205f3dccb30fdb6b5c2
-
SHA512
eb07396b558011b81617d555224f24dcdb8965b2619e507e01f978587146eb25a6f67bcfebc1d20abbdd45242ce0277f61fd5cdbde11f90a8ecebc0ec6fcd605
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqo:bc/y2lkF0+Beqo
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-14_679ee8d59962521d3f720d8e1fa76ce6_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-14_679ee8d59962521d3f720d8e1fa76ce6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-14_679ee8d59962521d3f720d8e1fa76ce6_cryptolocker
-
Size
44KB
-
MD5
679ee8d59962521d3f720d8e1fa76ce6
-
SHA1
366bac5a975c44d4c3abfd632bf2e5507cb3d765
-
SHA256
4a0d870518bacea1cb1e73759e15eab76b42adae14e3f205f3dccb30fdb6b5c2
-
SHA512
eb07396b558011b81617d555224f24dcdb8965b2619e507e01f978587146eb25a6f67bcfebc1d20abbdd45242ce0277f61fd5cdbde11f90a8ecebc0ec6fcd605
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqo:bc/y2lkF0+Beqo
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-