General
-
Target
2024-05-24_3c0b0fbd17ca74f81efa58631836c62d_cryptolocker
-
Size
44KB
-
Sample
240524-as3pjsef9v
-
MD5
3c0b0fbd17ca74f81efa58631836c62d
-
SHA1
c6322394ca428ea8355341fb2d4e630e043af3dd
-
SHA256
2fa7e88238ebd7c8099b80b091492418d6c7c0bc448ab989470bc7744e4092a9
-
SHA512
1834004a178ca645310c9c698eddc13768c10e748dd35bcdb17fcf4d4556586ca59ffa3c39d5b72db592ebebf920365a43ac5f578286d6845986026eb535537c
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAM:b/pYayGig5HjS3NPAM
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_3c0b0fbd17ca74f81efa58631836c62d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-24_3c0b0fbd17ca74f81efa58631836c62d_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-24_3c0b0fbd17ca74f81efa58631836c62d_cryptolocker
-
Size
44KB
-
MD5
3c0b0fbd17ca74f81efa58631836c62d
-
SHA1
c6322394ca428ea8355341fb2d4e630e043af3dd
-
SHA256
2fa7e88238ebd7c8099b80b091492418d6c7c0bc448ab989470bc7744e4092a9
-
SHA512
1834004a178ca645310c9c698eddc13768c10e748dd35bcdb17fcf4d4556586ca59ffa3c39d5b72db592ebebf920365a43ac5f578286d6845986026eb535537c
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAM:b/pYayGig5HjS3NPAM
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-