General
-
Target
2024-05-31_3cba59c654399ecd3eb53ae130116ecd_cryptolocker
-
Size
39KB
-
Sample
240531-2effmsfg3s
-
MD5
3cba59c654399ecd3eb53ae130116ecd
-
SHA1
9407f36efd2116bad797e365d64a90033d4aaea8
-
SHA256
66a165cb0d678bf184237a8c04b033f322eb05ccf1badef39a35e8667c3fed91
-
SHA512
edc952506839c288731878248210e53a342ace0697ce9ec1e52276b14bab6f2411b88690042fe625b7b85c6105a979e72801e8294d48d4277cbd2229854ea1fc
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenUZ:ZzFbxmLPWQMOtEvwDpjLeA
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_3cba59c654399ecd3eb53ae130116ecd_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-31_3cba59c654399ecd3eb53ae130116ecd_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-31_3cba59c654399ecd3eb53ae130116ecd_cryptolocker
-
Size
39KB
-
MD5
3cba59c654399ecd3eb53ae130116ecd
-
SHA1
9407f36efd2116bad797e365d64a90033d4aaea8
-
SHA256
66a165cb0d678bf184237a8c04b033f322eb05ccf1badef39a35e8667c3fed91
-
SHA512
edc952506839c288731878248210e53a342ace0697ce9ec1e52276b14bab6f2411b88690042fe625b7b85c6105a979e72801e8294d48d4277cbd2229854ea1fc
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenUZ:ZzFbxmLPWQMOtEvwDpjLeA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-