General
-
Target
2024-06-06_410e8fe42d504f71675fec65a87d9a6f_cryptolocker
-
Size
42KB
-
Sample
240606-z9j17sdc93
-
MD5
410e8fe42d504f71675fec65a87d9a6f
-
SHA1
ef536efb3343362c67ccd2019fff8a779ef9dc2c
-
SHA256
cdc9526b7f0f1d7d0a4eb780d55c18d686f2d358be8e50f91f4cc25f3c40a06b
-
SHA512
d7e9fa2f486509c625a19f4567dd846ec229fb8d399d7f2304cfe43a69fa4d89533db14224e23278933d013bd5446989dbcb50ae66c92629a437f95f4328b53c
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwT:bA6YcA/X6G0W143QT
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_410e8fe42d504f71675fec65a87d9a6f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-06_410e8fe42d504f71675fec65a87d9a6f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-06_410e8fe42d504f71675fec65a87d9a6f_cryptolocker
-
Size
42KB
-
MD5
410e8fe42d504f71675fec65a87d9a6f
-
SHA1
ef536efb3343362c67ccd2019fff8a779ef9dc2c
-
SHA256
cdc9526b7f0f1d7d0a4eb780d55c18d686f2d358be8e50f91f4cc25f3c40a06b
-
SHA512
d7e9fa2f486509c625a19f4567dd846ec229fb8d399d7f2304cfe43a69fa4d89533db14224e23278933d013bd5446989dbcb50ae66c92629a437f95f4328b53c
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwT:bA6YcA/X6G0W143QT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-