General
-
Target
2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker
-
Size
36KB
-
Sample
240521-s4vr7aaf69
-
MD5
08abdb9662f0e4c4e64377c3cb8d71bb
-
SHA1
18d52529feaffceb09d6feacf3c57639e961401c
-
SHA256
e98c3eeeeb99f3691ef90ac21cc8ae1778257e8ab2b352e7d91689332bb9a0a6
-
SHA512
4410c27d8dc61170283d47a9febbe775a0e0e6447c51082329b4da513d0b94ad9ac5ff9b519a2243d09bea4ef7c47c47fe1615ed8b467104f6ac9d15d455944d
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx+Z4:bA74zYcgT/Ekd0ryfjPIunqpeNswm6+i
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker
-
Size
36KB
-
MD5
08abdb9662f0e4c4e64377c3cb8d71bb
-
SHA1
18d52529feaffceb09d6feacf3c57639e961401c
-
SHA256
e98c3eeeeb99f3691ef90ac21cc8ae1778257e8ab2b352e7d91689332bb9a0a6
-
SHA512
4410c27d8dc61170283d47a9febbe775a0e0e6447c51082329b4da513d0b94ad9ac5ff9b519a2243d09bea4ef7c47c47fe1615ed8b467104f6ac9d15d455944d
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx+Z4:bA74zYcgT/Ekd0ryfjPIunqpeNswm6+i
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-