General
-
Target
2024-06-04_af1477411307d3ec5896aa000a076ade_cryptolocker
-
Size
34KB
-
Sample
240604-fkcfaaed37
-
MD5
af1477411307d3ec5896aa000a076ade
-
SHA1
f0ba6445f6a66e4e1bce178420e615555735b515
-
SHA256
278abcff91e76e280ab2596168eef95c8fde57a14567e687312b58acfd0310f8
-
SHA512
9ef7eab327dc8a383b72975dbd6ce8592a8359ca84b1e8480b1ab5a73e84e35e4b1c0e3f4b13615fb68d167a87edf905432183a4fdfc2a2da34571e3439a3b82
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jd+ad:bxNrC7kYo1Fxf2rYPsW
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_af1477411307d3ec5896aa000a076ade_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-04_af1477411307d3ec5896aa000a076ade_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-04_af1477411307d3ec5896aa000a076ade_cryptolocker
-
Size
34KB
-
MD5
af1477411307d3ec5896aa000a076ade
-
SHA1
f0ba6445f6a66e4e1bce178420e615555735b515
-
SHA256
278abcff91e76e280ab2596168eef95c8fde57a14567e687312b58acfd0310f8
-
SHA512
9ef7eab327dc8a383b72975dbd6ce8592a8359ca84b1e8480b1ab5a73e84e35e4b1c0e3f4b13615fb68d167a87edf905432183a4fdfc2a2da34571e3439a3b82
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5jd+ad:bxNrC7kYo1Fxf2rYPsW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-