General
-
Target
2024-06-09_6174065ea9e14a2b159045713606f349_cryptolocker
-
Size
44KB
-
Sample
240609-h9mcwsfe51
-
MD5
6174065ea9e14a2b159045713606f349
-
SHA1
9272ae38a9384d6964b4bfd6b5948b4a2c0a570d
-
SHA256
adfc7dd8fecb7315b28744151da9353f509e59946949f2c98997052d21574357
-
SHA512
cd818acf169ac489d4e3facad18eb692607659ec8bc139021a4bc90674dbdea0d23b55a99f710ed2d5b50d8eb6ab40d65e5b1b7bed7808ccb475f570dfe6d319
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQdrC:bm74zYcgT/EkM0ryfjPdQ4
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_6174065ea9e14a2b159045713606f349_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-09_6174065ea9e14a2b159045713606f349_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-09_6174065ea9e14a2b159045713606f349_cryptolocker
-
Size
44KB
-
MD5
6174065ea9e14a2b159045713606f349
-
SHA1
9272ae38a9384d6964b4bfd6b5948b4a2c0a570d
-
SHA256
adfc7dd8fecb7315b28744151da9353f509e59946949f2c98997052d21574357
-
SHA512
cd818acf169ac489d4e3facad18eb692607659ec8bc139021a4bc90674dbdea0d23b55a99f710ed2d5b50d8eb6ab40d65e5b1b7bed7808ccb475f570dfe6d319
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQdrC:bm74zYcgT/EkM0ryfjPdQ4
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-