General
-
Target
2024-06-09_7ae43152c6bd08fa61cae6363d5ca676_cryptolocker
-
Size
43KB
-
Sample
240609-jbarwagc96
-
MD5
7ae43152c6bd08fa61cae6363d5ca676
-
SHA1
58dac9dc36828add6220b0ef4480478d06b345ca
-
SHA256
7d2432061fb4dee37ef72d8558aced3e2de5a93a76031efa0823204de506252c
-
SHA512
68d25935b22b4083a1f216339e7c69ef8e69007d57b1582ecb2aa5fd85619730a9772cff4e8b755436f5adc08b07184d415bee1464624e166e34662fc3710000
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQdB:bm74zYcgT/EkM0ryfjPdQj
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_7ae43152c6bd08fa61cae6363d5ca676_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-09_7ae43152c6bd08fa61cae6363d5ca676_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-09_7ae43152c6bd08fa61cae6363d5ca676_cryptolocker
-
Size
43KB
-
MD5
7ae43152c6bd08fa61cae6363d5ca676
-
SHA1
58dac9dc36828add6220b0ef4480478d06b345ca
-
SHA256
7d2432061fb4dee37ef72d8558aced3e2de5a93a76031efa0823204de506252c
-
SHA512
68d25935b22b4083a1f216339e7c69ef8e69007d57b1582ecb2aa5fd85619730a9772cff4e8b755436f5adc08b07184d415bee1464624e166e34662fc3710000
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQdB:bm74zYcgT/EkM0ryfjPdQj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-