General
-
Target
2024-05-25_f9b31ef558cb3c3b304bd177b76bd0c6_cryptolocker
-
Size
45KB
-
Sample
240525-ewgzgaed28
-
MD5
f9b31ef558cb3c3b304bd177b76bd0c6
-
SHA1
411a5a67759aa9d3d7b2704b58e4d6153f8cb242
-
SHA256
360abda4864c67cff8a72e7d4c8ae73ec8394fae8cd5a0b775b5eaa48bcc7a1c
-
SHA512
29c3ff99505bfe2d3779ad958b9d34639f5cde082d1304fb4444789362064fea114a69fa9e012136caba738a21cae67668b95614218ea7617d2a950f176a0563
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDv9y:bm74zYcgT/Ekn0ryfjvv9y
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-25_f9b31ef558cb3c3b304bd177b76bd0c6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-25_f9b31ef558cb3c3b304bd177b76bd0c6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-25_f9b31ef558cb3c3b304bd177b76bd0c6_cryptolocker
-
Size
45KB
-
MD5
f9b31ef558cb3c3b304bd177b76bd0c6
-
SHA1
411a5a67759aa9d3d7b2704b58e4d6153f8cb242
-
SHA256
360abda4864c67cff8a72e7d4c8ae73ec8394fae8cd5a0b775b5eaa48bcc7a1c
-
SHA512
29c3ff99505bfe2d3779ad958b9d34639f5cde082d1304fb4444789362064fea114a69fa9e012136caba738a21cae67668b95614218ea7617d2a950f176a0563
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDv9y:bm74zYcgT/Ekn0ryfjvv9y
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-