General
-
Target
2024-06-03_3ecb0fd92e9665e1a8ad30bdd9cbc2ca_cryptolocker
-
Size
34KB
-
Sample
240603-3cel1adf72
-
MD5
3ecb0fd92e9665e1a8ad30bdd9cbc2ca
-
SHA1
c5d93d7325ef08ac4c4054fecac1e8d63feec8dc
-
SHA256
1e70deee3b75f6bc200831941a4aeb62630c7a2a556102089c86d8e4d8baced5
-
SHA512
33323bd487415c4944d88cb240afdd4983fc9065b5bf8a411a66cf1406a0e70a0ba997375a857018714cf9f5bfa6832b3f715e0f48c0861544c523d6dc9accfb
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGLZ9aLzd:bG74zYcgT/Ekd0ryfjgjaV
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_3ecb0fd92e9665e1a8ad30bdd9cbc2ca_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-03_3ecb0fd92e9665e1a8ad30bdd9cbc2ca_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-03_3ecb0fd92e9665e1a8ad30bdd9cbc2ca_cryptolocker
-
Size
34KB
-
MD5
3ecb0fd92e9665e1a8ad30bdd9cbc2ca
-
SHA1
c5d93d7325ef08ac4c4054fecac1e8d63feec8dc
-
SHA256
1e70deee3b75f6bc200831941a4aeb62630c7a2a556102089c86d8e4d8baced5
-
SHA512
33323bd487415c4944d88cb240afdd4983fc9065b5bf8a411a66cf1406a0e70a0ba997375a857018714cf9f5bfa6832b3f715e0f48c0861544c523d6dc9accfb
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGLZ9aLzd:bG74zYcgT/Ekd0ryfjgjaV
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-