General
-
Target
2024-05-21_7751e6ea23103e588776ab9035d9b6a5_cryptolocker
-
Size
32KB
-
Sample
240521-rsr2gsha94
-
MD5
7751e6ea23103e588776ab9035d9b6a5
-
SHA1
a3601388ee42685f2a156a3e96e7fc957e29d199
-
SHA256
c1b0b73522044590f0305ede558de83733d28285fba05b0a84d6b34d3bed5843
-
SHA512
e3596cfcb814fe0e49ef75c48e5aba44cd15cc95196cc58ffcce952513a5c7dba3eb3a3e12ea03a8010db80c1bf1c265657df77f424a1a6f93848cc55e3c1b43
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvx9:bG74zYcgT/Ekd0ryfjkL
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_7751e6ea23103e588776ab9035d9b6a5_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-21_7751e6ea23103e588776ab9035d9b6a5_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_7751e6ea23103e588776ab9035d9b6a5_cryptolocker
-
Size
32KB
-
MD5
7751e6ea23103e588776ab9035d9b6a5
-
SHA1
a3601388ee42685f2a156a3e96e7fc957e29d199
-
SHA256
c1b0b73522044590f0305ede558de83733d28285fba05b0a84d6b34d3bed5843
-
SHA512
e3596cfcb814fe0e49ef75c48e5aba44cd15cc95196cc58ffcce952513a5c7dba3eb3a3e12ea03a8010db80c1bf1c265657df77f424a1a6f93848cc55e3c1b43
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvx9:bG74zYcgT/Ekd0ryfjkL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-