General
-
Target
2024-06-11_65d3d0594b6e901efab74916f7f527f8_cryptolocker
-
Size
43KB
-
Sample
240611-d5klaasfph
-
MD5
65d3d0594b6e901efab74916f7f527f8
-
SHA1
fc7dc36cf743ebcd3cd65794ac9b83d6695c2116
-
SHA256
c8560741deee4f9b7219af4487c3c5e6dd385d26eee0a3001b60f84580b89677
-
SHA512
a034fd14af99f81a802c2ecd6c249ddb9420968f0c79ec01e2e19c39fb48d7baa3fff36163734da3dcb3ba8ad4a7a7e37dd1832c88b6975c1ac9390041707de5
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHQh:bCDOw9aMDooc+vAwh
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_65d3d0594b6e901efab74916f7f527f8_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-11_65d3d0594b6e901efab74916f7f527f8_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-11_65d3d0594b6e901efab74916f7f527f8_cryptolocker
-
Size
43KB
-
MD5
65d3d0594b6e901efab74916f7f527f8
-
SHA1
fc7dc36cf743ebcd3cd65794ac9b83d6695c2116
-
SHA256
c8560741deee4f9b7219af4487c3c5e6dd385d26eee0a3001b60f84580b89677
-
SHA512
a034fd14af99f81a802c2ecd6c249ddb9420968f0c79ec01e2e19c39fb48d7baa3fff36163734da3dcb3ba8ad4a7a7e37dd1832c88b6975c1ac9390041707de5
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHQh:bCDOw9aMDooc+vAwh
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-