General
-
Target
2024-06-02_9cabe5e0005806adeaffb623310a7e39_cryptolocker
-
Size
41KB
-
Sample
240602-2cpxashc3y
-
MD5
9cabe5e0005806adeaffb623310a7e39
-
SHA1
ff7440ac5502e7b3d615d66af67f476f2cef9048
-
SHA256
7b6a794f4c8e93b93752d8f5b2f28c4a1a168fd2d41a8ce1d3588ebd578ce20e
-
SHA512
55805654199d4295c9019f905870b19b0a4ba968fd2d5662fadc8c3ae09375b14b78f9d75bd22c9c191fa031ac8a7a1b31d57266eca9c827d2e0f7f1c66c8d74
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDkv:ZzFbxmLPWQMOtEvwDpjLeJAsKcc
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_9cabe5e0005806adeaffb623310a7e39_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-02_9cabe5e0005806adeaffb623310a7e39_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_9cabe5e0005806adeaffb623310a7e39_cryptolocker
-
Size
41KB
-
MD5
9cabe5e0005806adeaffb623310a7e39
-
SHA1
ff7440ac5502e7b3d615d66af67f476f2cef9048
-
SHA256
7b6a794f4c8e93b93752d8f5b2f28c4a1a168fd2d41a8ce1d3588ebd578ce20e
-
SHA512
55805654199d4295c9019f905870b19b0a4ba968fd2d5662fadc8c3ae09375b14b78f9d75bd22c9c191fa031ac8a7a1b31d57266eca9c827d2e0f7f1c66c8d74
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDkv:ZzFbxmLPWQMOtEvwDpjLeJAsKcc
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-