General
-
Target
2024-06-03_fa33954e5f6d1866c8e76f4b8b208d26_cryptolocker
-
Size
36KB
-
Sample
240603-n1ppjseg68
-
MD5
fa33954e5f6d1866c8e76f4b8b208d26
-
SHA1
6c416227fd745fb81a9c8a4fc7991b0cd62f54e5
-
SHA256
7990bc9dd1274b10b3ec717265bd916c5621b483e158f1a4949e6ef580aa04e9
-
SHA512
f08456eed202aa0a77dd688cc08c0e0b3a3e79e93193adcd77c14c3824edea468c37897a6620e408edb0918fe6e3427d3a693ddedd60495de0182c7374c9df9c
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZR:bA74zYcgT/Ekd0ryfjPIunqpeNswm6/
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_fa33954e5f6d1866c8e76f4b8b208d26_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-03_fa33954e5f6d1866c8e76f4b8b208d26_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-03_fa33954e5f6d1866c8e76f4b8b208d26_cryptolocker
-
Size
36KB
-
MD5
fa33954e5f6d1866c8e76f4b8b208d26
-
SHA1
6c416227fd745fb81a9c8a4fc7991b0cd62f54e5
-
SHA256
7990bc9dd1274b10b3ec717265bd916c5621b483e158f1a4949e6ef580aa04e9
-
SHA512
f08456eed202aa0a77dd688cc08c0e0b3a3e79e93193adcd77c14c3824edea468c37897a6620e408edb0918fe6e3427d3a693ddedd60495de0182c7374c9df9c
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZR:bA74zYcgT/Ekd0ryfjPIunqpeNswm6/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-