General
-
Target
2024-05-31_db3cb7e653bcc0f3ca5a88130f204107_cryptolocker
-
Size
33KB
-
Sample
240531-zjrncsdf22
-
MD5
db3cb7e653bcc0f3ca5a88130f204107
-
SHA1
e8fa75e0da4b9964dd6383bb3d33decc5402f3fc
-
SHA256
24ce2a4236e07d7a6410c2cab5a278d867e7ba22c6055d3b4615b70170f80f20
-
SHA512
b976ced347d6801c95f849bbc6c9875dae631f388812fbb997f4cf93818f283803785d803a38f17deab1a6fc4ef6d8a42bdb0dcd64f296bebde414ea6490ddd9
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuab:bG74zYcgT/Ekd0ryfjK
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_db3cb7e653bcc0f3ca5a88130f204107_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-31_db3cb7e653bcc0f3ca5a88130f204107_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-31_db3cb7e653bcc0f3ca5a88130f204107_cryptolocker
-
Size
33KB
-
MD5
db3cb7e653bcc0f3ca5a88130f204107
-
SHA1
e8fa75e0da4b9964dd6383bb3d33decc5402f3fc
-
SHA256
24ce2a4236e07d7a6410c2cab5a278d867e7ba22c6055d3b4615b70170f80f20
-
SHA512
b976ced347d6801c95f849bbc6c9875dae631f388812fbb997f4cf93818f283803785d803a38f17deab1a6fc4ef6d8a42bdb0dcd64f296bebde414ea6490ddd9
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuab:bG74zYcgT/Ekd0ryfjK
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-