General
-
Target
2024-06-11_3bc33b8a5bb79d0818e2d7ead27af248_cryptolocker
-
Size
391KB
-
Sample
240611-yynpkszdrq
-
MD5
3bc33b8a5bb79d0818e2d7ead27af248
-
SHA1
83324d6a245b2b4ddfdb07bc77182b718cf9df90
-
SHA256
f1678257907c19f79702bc8a2a1cff15f38a6a297984db8ec5fd8f3399812cbb
-
SHA512
34c34cb8ee487851af5bba697026e472f36a550c7948234e624c456f47a157988d0d49f28733241f4f96629c4bb87c7c9434aaedc3fafc933086a7d6c3af0d7e
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRp:nnOflT/ZFIjBz3xjTxynGUOUhXRp
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_3bc33b8a5bb79d0818e2d7ead27af248_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-11_3bc33b8a5bb79d0818e2d7ead27af248_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-11_3bc33b8a5bb79d0818e2d7ead27af248_cryptolocker
-
Size
391KB
-
MD5
3bc33b8a5bb79d0818e2d7ead27af248
-
SHA1
83324d6a245b2b4ddfdb07bc77182b718cf9df90
-
SHA256
f1678257907c19f79702bc8a2a1cff15f38a6a297984db8ec5fd8f3399812cbb
-
SHA512
34c34cb8ee487851af5bba697026e472f36a550c7948234e624c456f47a157988d0d49f28733241f4f96629c4bb87c7c9434aaedc3fafc933086a7d6c3af0d7e
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXRp:nnOflT/ZFIjBz3xjTxynGUOUhXRp
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-