General
-
Target
2024-06-12_a72676365e53edb8a2bbab4a97027051_cryptolocker
-
Size
33KB
-
Sample
240612-ygzqhsxfle
-
MD5
a72676365e53edb8a2bbab4a97027051
-
SHA1
335f9d95d65ac943282b76a67d9d95ce8369b9d7
-
SHA256
594c240509f07040f0ea59852d91ea6d4fff034747216877dd400df323db5be3
-
SHA512
081c10d9464b72bfd291c5a6e04252827f97f019fdc58bcf351fb4168ae23314c284cd8bf946451d57a3822fe8edb4940d336d79b67b2160544338e99d85e71b
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGOO:bG74zYcgT/Ekd0ryfjI
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-12_a72676365e53edb8a2bbab4a97027051_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-12_a72676365e53edb8a2bbab4a97027051_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-12_a72676365e53edb8a2bbab4a97027051_cryptolocker
-
Size
33KB
-
MD5
a72676365e53edb8a2bbab4a97027051
-
SHA1
335f9d95d65ac943282b76a67d9d95ce8369b9d7
-
SHA256
594c240509f07040f0ea59852d91ea6d4fff034747216877dd400df323db5be3
-
SHA512
081c10d9464b72bfd291c5a6e04252827f97f019fdc58bcf351fb4168ae23314c284cd8bf946451d57a3822fe8edb4940d336d79b67b2160544338e99d85e71b
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGOO:bG74zYcgT/Ekd0ryfjI
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-