General
-
Target
2024-05-27_41abf8ee20e959244741ba4c6e713f5e_cryptolocker
-
Size
55KB
-
Sample
240527-xvxyeafg48
-
MD5
41abf8ee20e959244741ba4c6e713f5e
-
SHA1
a13209cbfac58f045b3071bd3e2514ab9003a13b
-
SHA256
a78fc7f6e18ae832ba3139d30cfaede6cb58b91ad0db338b69b2ddb2fafe8ad8
-
SHA512
1444c7269de7daf78e6c0b68c7699772533d3dfd33b6b10206576b0d4ccbac2d1a4108e90d46e6d85660bb0046cab8b110b6fc5db1b5d44c47406f065cd0046b
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puD:bIDOw9a0DwitDZzcTLD
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_41abf8ee20e959244741ba4c6e713f5e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-27_41abf8ee20e959244741ba4c6e713f5e_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-27_41abf8ee20e959244741ba4c6e713f5e_cryptolocker
-
Size
55KB
-
MD5
41abf8ee20e959244741ba4c6e713f5e
-
SHA1
a13209cbfac58f045b3071bd3e2514ab9003a13b
-
SHA256
a78fc7f6e18ae832ba3139d30cfaede6cb58b91ad0db338b69b2ddb2fafe8ad8
-
SHA512
1444c7269de7daf78e6c0b68c7699772533d3dfd33b6b10206576b0d4ccbac2d1a4108e90d46e6d85660bb0046cab8b110b6fc5db1b5d44c47406f065cd0046b
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8puD:bIDOw9a0DwitDZzcTLD
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-