General
-
Target
2024-05-23_47a9a7f95d0a318aa5f0ecef593b7a90_cryptolocker
-
Size
33KB
-
Sample
240523-3ejzhadc39
-
MD5
47a9a7f95d0a318aa5f0ecef593b7a90
-
SHA1
c24c87426656d0816470a0b4e4a56c28a63c489c
-
SHA256
2c3f30deadd45d074c516408d1c0e0f197ce2b88d537af3eeb94169277d1ddab
-
SHA512
27b6df6da332962fa7f78953fcd4148370f86ca63bb5bb4457cfe785adff53030a9a8d287959e11f61500cfa4ac00675242bfe9bf458584d9622cb8ad8989ebb
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvxws:bG74zYcgT/Ekd0ryfjkms
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_47a9a7f95d0a318aa5f0ecef593b7a90_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-23_47a9a7f95d0a318aa5f0ecef593b7a90_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_47a9a7f95d0a318aa5f0ecef593b7a90_cryptolocker
-
Size
33KB
-
MD5
47a9a7f95d0a318aa5f0ecef593b7a90
-
SHA1
c24c87426656d0816470a0b4e4a56c28a63c489c
-
SHA256
2c3f30deadd45d074c516408d1c0e0f197ce2b88d537af3eeb94169277d1ddab
-
SHA512
27b6df6da332962fa7f78953fcd4148370f86ca63bb5bb4457cfe785adff53030a9a8d287959e11f61500cfa4ac00675242bfe9bf458584d9622cb8ad8989ebb
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvxws:bG74zYcgT/Ekd0ryfjkms
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-