General
-
Target
2024-06-06_44f70acf5192f4184e1e958a4d6f79a0_cryptolocker
-
Size
39KB
-
Sample
240606-3eslmsef29
-
MD5
44f70acf5192f4184e1e958a4d6f79a0
-
SHA1
d16cd86e9087c07b4264182d91bfbbfe8a5f5d94
-
SHA256
5d3afdc066382c7f03a9a3218985ac6db4d5fce9acb50440f1409e004552e485
-
SHA512
ce923aa2c36b8a7f9673d90528142f93cd23a3cadc296c4b3df09a9991c3ef215b2cde3b4b307c810b0181eed129acd3f2b5e466ea135c1fce1c004bd2c48c56
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mr:bc/y2lLRU6zA6qr
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_44f70acf5192f4184e1e958a4d6f79a0_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-06_44f70acf5192f4184e1e958a4d6f79a0_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-06_44f70acf5192f4184e1e958a4d6f79a0_cryptolocker
-
Size
39KB
-
MD5
44f70acf5192f4184e1e958a4d6f79a0
-
SHA1
d16cd86e9087c07b4264182d91bfbbfe8a5f5d94
-
SHA256
5d3afdc066382c7f03a9a3218985ac6db4d5fce9acb50440f1409e004552e485
-
SHA512
ce923aa2c36b8a7f9673d90528142f93cd23a3cadc296c4b3df09a9991c3ef215b2cde3b4b307c810b0181eed129acd3f2b5e466ea135c1fce1c004bd2c48c56
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mr:bc/y2lLRU6zA6qr
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-