General
-
Target
2024-05-27_601fed67897376a58f842a1c4bc5b21c_cryptolocker
-
Size
43KB
-
Sample
240527-3epjzsfa88
-
MD5
601fed67897376a58f842a1c4bc5b21c
-
SHA1
42a2a36ac66e2f92fa9277d4e9dee0f7849c8013
-
SHA256
5c429dcb2ed19b04b38bd52b37631d7e21fe9aa7cd17dff536c4b9eace2165cf
-
SHA512
e6d57889f385feb4838e8083743dea0253841fba656f8af7defed1597b37345ca91edc161bcfa636485bc9a8f7ec8bd78f9e729d6cca88fbb2cec2fdea377302
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAH/H:bCDOw9aMDooc+vAfH
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_601fed67897376a58f842a1c4bc5b21c_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-27_601fed67897376a58f842a1c4bc5b21c_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-27_601fed67897376a58f842a1c4bc5b21c_cryptolocker
-
Size
43KB
-
MD5
601fed67897376a58f842a1c4bc5b21c
-
SHA1
42a2a36ac66e2f92fa9277d4e9dee0f7849c8013
-
SHA256
5c429dcb2ed19b04b38bd52b37631d7e21fe9aa7cd17dff536c4b9eace2165cf
-
SHA512
e6d57889f385feb4838e8083743dea0253841fba656f8af7defed1597b37345ca91edc161bcfa636485bc9a8f7ec8bd78f9e729d6cca88fbb2cec2fdea377302
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAH/H:bCDOw9aMDooc+vAfH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-