General
-
Target
2024-05-28_e8f449e58be3b56429fb7aa80a56a2a2_cryptolocker
-
Size
38KB
-
Sample
240528-s6g9wabh35
-
MD5
e8f449e58be3b56429fb7aa80a56a2a2
-
SHA1
07cd1acbeecd2f109cd8c86a5d03258db7b865d0
-
SHA256
33b5af081e460ef2f61b810dc7eab8dd716d414a4b7916ec30d02b11cdf13860
-
SHA512
c4cc29471aa60579da6065c2799537d3a4e40d46756bff1d7e8cc838c97e63a2f5d3648eb1168a59a60f680e8730754b4a407c135c9e9dc0b8df41c89a85d255
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mrD:bc/y2lLRU6zA6q/
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_e8f449e58be3b56429fb7aa80a56a2a2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-28_e8f449e58be3b56429fb7aa80a56a2a2_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-28_e8f449e58be3b56429fb7aa80a56a2a2_cryptolocker
-
Size
38KB
-
MD5
e8f449e58be3b56429fb7aa80a56a2a2
-
SHA1
07cd1acbeecd2f109cd8c86a5d03258db7b865d0
-
SHA256
33b5af081e460ef2f61b810dc7eab8dd716d414a4b7916ec30d02b11cdf13860
-
SHA512
c4cc29471aa60579da6065c2799537d3a4e40d46756bff1d7e8cc838c97e63a2f5d3648eb1168a59a60f680e8730754b4a407c135c9e9dc0b8df41c89a85d255
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mrD:bc/y2lLRU6zA6q/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-