General
-
Target
2024-06-03_81d7b5c7dffb983022327e4fc7941809_cryptolocker
-
Size
36KB
-
Sample
240603-jg6fqshe42
-
MD5
81d7b5c7dffb983022327e4fc7941809
-
SHA1
debc74a42f1eca8a9db2ffd53263c89aaf17ddcb
-
SHA256
396d9ff300791485533b8405122dd80a77fef0a1a481fcd029b23d5dc2ef0570
-
SHA512
9deac43b382f4ca3003def0c11b7c59c5fdaf7b6849590b45c93bceabfe93fb713e52d18b9f8df5d4122c46c84bb1a55dc844cb5aa900b68ee4621a3a9c44c0e
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZB:bA74zYcgT/Ekd0ryfjPIunqpeNswm6v
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_81d7b5c7dffb983022327e4fc7941809_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-03_81d7b5c7dffb983022327e4fc7941809_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-03_81d7b5c7dffb983022327e4fc7941809_cryptolocker
-
Size
36KB
-
MD5
81d7b5c7dffb983022327e4fc7941809
-
SHA1
debc74a42f1eca8a9db2ffd53263c89aaf17ddcb
-
SHA256
396d9ff300791485533b8405122dd80a77fef0a1a481fcd029b23d5dc2ef0570
-
SHA512
9deac43b382f4ca3003def0c11b7c59c5fdaf7b6849590b45c93bceabfe93fb713e52d18b9f8df5d4122c46c84bb1a55dc844cb5aa900b68ee4621a3a9c44c0e
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZB:bA74zYcgT/Ekd0ryfjPIunqpeNswm6v
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-