General
-
Target
2024-05-24_3370a742834a6e4873a186a27f31c61e_cryptolocker
-
Size
41KB
-
Sample
240524-e2d5rsdb61
-
MD5
3370a742834a6e4873a186a27f31c61e
-
SHA1
b77c4b0c0597a13e6cedf52608e9e1eb1f5c058b
-
SHA256
8c6dd549b6fb32f8815d415c6b7ffe0e71114cd3af1c96b17dcf22e4e79e0eec
-
SHA512
0862bfd2567809d5cda570a482b9318840f3917c9de2852201ce8c28f18b9917537232235f4fff730967faff30baa018f938d2d248456f02b5ff021ff459a53b
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/Ey/A:btB9g/WItCSsAGjX7e9N0hunKLYNOZN
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_3370a742834a6e4873a186a27f31c61e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-24_3370a742834a6e4873a186a27f31c61e_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-24_3370a742834a6e4873a186a27f31c61e_cryptolocker
-
Size
41KB
-
MD5
3370a742834a6e4873a186a27f31c61e
-
SHA1
b77c4b0c0597a13e6cedf52608e9e1eb1f5c058b
-
SHA256
8c6dd549b6fb32f8815d415c6b7ffe0e71114cd3af1c96b17dcf22e4e79e0eec
-
SHA512
0862bfd2567809d5cda570a482b9318840f3917c9de2852201ce8c28f18b9917537232235f4fff730967faff30baa018f938d2d248456f02b5ff021ff459a53b
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/Ey/A:btB9g/WItCSsAGjX7e9N0hunKLYNOZN
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-