General
-
Target
2024-06-01_21dce85292bb27098fabfe4ed340fe3a_cryptolocker
-
Size
42KB
-
Sample
240601-p4sq2sde72
-
MD5
21dce85292bb27098fabfe4ed340fe3a
-
SHA1
b660cf5a351837e1c5aef7ba0aed99cb4161431d
-
SHA256
2e1152e54bf03ecb3af67c7fd6efb48e8ce2e8b1d43e835ea88ffa07e64b5318
-
SHA512
7c1b80b583fdc8e0089611428db9bfe45b8e5c1b2c9f558c2abbffe93080aea86fb7e82921b709b5d1ac083c06c12b22c72b516ef149a585e0d3409eb48d56fd
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUETeV:bm74zYcgT/EkM0ryfjlTeV
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_21dce85292bb27098fabfe4ed340fe3a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_21dce85292bb27098fabfe4ed340fe3a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-01_21dce85292bb27098fabfe4ed340fe3a_cryptolocker
-
Size
42KB
-
MD5
21dce85292bb27098fabfe4ed340fe3a
-
SHA1
b660cf5a351837e1c5aef7ba0aed99cb4161431d
-
SHA256
2e1152e54bf03ecb3af67c7fd6efb48e8ce2e8b1d43e835ea88ffa07e64b5318
-
SHA512
7c1b80b583fdc8e0089611428db9bfe45b8e5c1b2c9f558c2abbffe93080aea86fb7e82921b709b5d1ac083c06c12b22c72b516ef149a585e0d3409eb48d56fd
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUETeV:bm74zYcgT/EkM0ryfjlTeV
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-