General
-
Target
2024-06-09_ff43f124fb725a17c2e8c68c0464e0cc_cryptolocker
-
Size
37KB
-
Sample
240609-e18yraec83
-
MD5
ff43f124fb725a17c2e8c68c0464e0cc
-
SHA1
a7658387ef6eb6fcfab8a8bf0867aeb90a82283a
-
SHA256
ce97397cb50a2cb420d38778f00a2a3ea857e0148114ac04addd6007d8bf1a9f
-
SHA512
dfe7c0be391116c46c405e796c35e0658f8370ad60e853609ec48a7d0fbc550413f924fcf43a962e465393f00ccf49b06e43172d9f55943ec6fe2363c65d0ae4
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3V6uVjQ:b7o/2n1TCraU6GD1a4Xt9bRUlV5Q
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_ff43f124fb725a17c2e8c68c0464e0cc_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-09_ff43f124fb725a17c2e8c68c0464e0cc_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-09_ff43f124fb725a17c2e8c68c0464e0cc_cryptolocker
-
Size
37KB
-
MD5
ff43f124fb725a17c2e8c68c0464e0cc
-
SHA1
a7658387ef6eb6fcfab8a8bf0867aeb90a82283a
-
SHA256
ce97397cb50a2cb420d38778f00a2a3ea857e0148114ac04addd6007d8bf1a9f
-
SHA512
dfe7c0be391116c46c405e796c35e0658f8370ad60e853609ec48a7d0fbc550413f924fcf43a962e465393f00ccf49b06e43172d9f55943ec6fe2363c65d0ae4
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3V6uVjQ:b7o/2n1TCraU6GD1a4Xt9bRUlV5Q
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-