General
-
Target
2024-06-01_4aecdcefede3c489985bea2525d94250_cryptolocker
-
Size
34KB
-
Sample
240601-yp1b1sdd5t
-
MD5
4aecdcefede3c489985bea2525d94250
-
SHA1
bee4b62b06e7592ef5bc83abac3ef1a95f1a16f8
-
SHA256
e1afaa0b63394cf2763ba3644bf1b80db2013dedf719510dd28e4e89d2060ac1
-
SHA512
4bcebccd273a5a0ad0b14f7fec359a6c86f0793b63b0f53a76d4d8e7ed342520bb7f81407f1986cb4ef49de3b012e35ce06f875a8562031c782bd90aff5c95cc
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+T9t:bAvJCYOOvbRPDEgXRc+BAILi3
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_4aecdcefede3c489985bea2525d94250_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-01_4aecdcefede3c489985bea2525d94250_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-01_4aecdcefede3c489985bea2525d94250_cryptolocker
-
Size
34KB
-
MD5
4aecdcefede3c489985bea2525d94250
-
SHA1
bee4b62b06e7592ef5bc83abac3ef1a95f1a16f8
-
SHA256
e1afaa0b63394cf2763ba3644bf1b80db2013dedf719510dd28e4e89d2060ac1
-
SHA512
4bcebccd273a5a0ad0b14f7fec359a6c86f0793b63b0f53a76d4d8e7ed342520bb7f81407f1986cb4ef49de3b012e35ce06f875a8562031c782bd90aff5c95cc
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+T9t:bAvJCYOOvbRPDEgXRc+BAILi3
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-