General
-
Target
2024-05-29_4add7f7ac08a1344df4a5eb31c7b9f32_cryptolocker
-
Size
56KB
-
Sample
240529-e3cy4abc67
-
MD5
4add7f7ac08a1344df4a5eb31c7b9f32
-
SHA1
0d750b3f2559ce54348118550e42542899686984
-
SHA256
8e9f609533168ab1d8b89346a5b85bbda39cc45891e383acd6195cf75fe4f522
-
SHA512
f42d422a5e2fde8b32ad353dd00fdccbc09f9886e9bc000654f03dc346c783f0ba4c0c2a32e0d5e62bc97714ecc8b7e38f005531646b75c2e06e332cfb066e91
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8pu3+:bIDOw9a0DwitDZzcTLO
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_4add7f7ac08a1344df4a5eb31c7b9f32_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-29_4add7f7ac08a1344df4a5eb31c7b9f32_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-29_4add7f7ac08a1344df4a5eb31c7b9f32_cryptolocker
-
Size
56KB
-
MD5
4add7f7ac08a1344df4a5eb31c7b9f32
-
SHA1
0d750b3f2559ce54348118550e42542899686984
-
SHA256
8e9f609533168ab1d8b89346a5b85bbda39cc45891e383acd6195cf75fe4f522
-
SHA512
f42d422a5e2fde8b32ad353dd00fdccbc09f9886e9bc000654f03dc346c783f0ba4c0c2a32e0d5e62bc97714ecc8b7e38f005531646b75c2e06e332cfb066e91
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8pu3+:bIDOw9a0DwitDZzcTLO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-