General
-
Target
2024-05-29_707ad8f35093f671790dafdf7a3491be_cryptolocker
-
Size
44KB
-
Sample
240529-hd4x3aed99
-
MD5
707ad8f35093f671790dafdf7a3491be
-
SHA1
e837da4b8b643cc7acff31c3c2f5f6ef2269891b
-
SHA256
a397c1dc15de721d5f83ff6540019ac966111852cc2744f0e57efb8f6c470eec
-
SHA512
8506794f1de656ac5742f43446a1a1cbb97c9743ac87621030a4ee5a63481fd4ff9369adaad6c5fbae031a46a755e087b3d3af41d59e6bc388160e71bb7f8aa6
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUki:bm74zYcgT/EkM0ryfjdi
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_707ad8f35093f671790dafdf7a3491be_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-29_707ad8f35093f671790dafdf7a3491be_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-29_707ad8f35093f671790dafdf7a3491be_cryptolocker
-
Size
44KB
-
MD5
707ad8f35093f671790dafdf7a3491be
-
SHA1
e837da4b8b643cc7acff31c3c2f5f6ef2269891b
-
SHA256
a397c1dc15de721d5f83ff6540019ac966111852cc2744f0e57efb8f6c470eec
-
SHA512
8506794f1de656ac5742f43446a1a1cbb97c9743ac87621030a4ee5a63481fd4ff9369adaad6c5fbae031a46a755e087b3d3af41d59e6bc388160e71bb7f8aa6
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUki:bm74zYcgT/EkM0ryfjdi
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-