General
-
Target
2024-06-10_02d260129a6201c9184f9bc8bb743134_cryptolocker
-
Size
44KB
-
Sample
240610-g4whyadg85
-
MD5
02d260129a6201c9184f9bc8bb743134
-
SHA1
f3e19a11558faec69b90285f4c4a6e53725f3718
-
SHA256
ddb41fa1e503edd1b838fa4a06837388777ad6e118e0657d8bebc8e338f094e4
-
SHA512
a7dd1befb4de4c0ec6dfec7681bfd07a7f8f44d54d644efed571cd8f44d52e08e6371132926709695d388c20e3eec72ba6611324fae129de6db1ba2d82e62ffd
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIG6X:bm74zYcgT/Ekn0ryfjiY
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-10_02d260129a6201c9184f9bc8bb743134_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-10_02d260129a6201c9184f9bc8bb743134_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-10_02d260129a6201c9184f9bc8bb743134_cryptolocker
-
Size
44KB
-
MD5
02d260129a6201c9184f9bc8bb743134
-
SHA1
f3e19a11558faec69b90285f4c4a6e53725f3718
-
SHA256
ddb41fa1e503edd1b838fa4a06837388777ad6e118e0657d8bebc8e338f094e4
-
SHA512
a7dd1befb4de4c0ec6dfec7681bfd07a7f8f44d54d644efed571cd8f44d52e08e6371132926709695d388c20e3eec72ba6611324fae129de6db1ba2d82e62ffd
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIG6X:bm74zYcgT/Ekn0ryfjiY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-