General
-
Target
2024-06-09_164083784795fd693822f9446bef1748_cryptolocker
-
Size
55KB
-
Sample
240609-f4q3saeb6y
-
MD5
164083784795fd693822f9446bef1748
-
SHA1
ed38296b25fa10e0919bea3737463ba72b698d2f
-
SHA256
b99f9d763d81920195bdeee40ba550585c98ae6f49e7d065d06d28c45de094b5
-
SHA512
4eaa4c89642adfdc61a3374d0c1be906ef5ad257c1a3d3040ed00414d09be23a9ffd753e2e1b7bfd438eae7169ae8883cb844ff664883d47142d7c160ab38db3
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8pu7:bIDOw9a0DwitDZzcTL7
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_164083784795fd693822f9446bef1748_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-09_164083784795fd693822f9446bef1748_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-09_164083784795fd693822f9446bef1748_cryptolocker
-
Size
55KB
-
MD5
164083784795fd693822f9446bef1748
-
SHA1
ed38296b25fa10e0919bea3737463ba72b698d2f
-
SHA256
b99f9d763d81920195bdeee40ba550585c98ae6f49e7d065d06d28c45de094b5
-
SHA512
4eaa4c89642adfdc61a3374d0c1be906ef5ad257c1a3d3040ed00414d09be23a9ffd753e2e1b7bfd438eae7169ae8883cb844ff664883d47142d7c160ab38db3
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8pu7:bIDOw9a0DwitDZzcTL7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-