General
-
Target
2024-06-11_69170415652d7e58bd4fcf6042179f81_cryptolocker
-
Size
44KB
-
Sample
240611-vgcdfatfqd
-
MD5
69170415652d7e58bd4fcf6042179f81
-
SHA1
c2248bec323b28bb946428f140538b92ad074424
-
SHA256
2cbffd69a8e5fa7fd53bacf8d77de6ca237e3a6483bd292ac8ed0b442729b5a7
-
SHA512
18924dad918d334cc43ad6097819839dac69446086d3d9affd5268b8bb527395a7b0027bff78c9941bfc218631117bcfa0c612daf74a3e2fe8a9d27dba341bfb
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydXG:bCDOw9aMDooc+vAyNG
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_69170415652d7e58bd4fcf6042179f81_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-11_69170415652d7e58bd4fcf6042179f81_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-11_69170415652d7e58bd4fcf6042179f81_cryptolocker
-
Size
44KB
-
MD5
69170415652d7e58bd4fcf6042179f81
-
SHA1
c2248bec323b28bb946428f140538b92ad074424
-
SHA256
2cbffd69a8e5fa7fd53bacf8d77de6ca237e3a6483bd292ac8ed0b442729b5a7
-
SHA512
18924dad918d334cc43ad6097819839dac69446086d3d9affd5268b8bb527395a7b0027bff78c9941bfc218631117bcfa0c612daf74a3e2fe8a9d27dba341bfb
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydXG:bCDOw9aMDooc+vAyNG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-