General
-
Target
2024-06-14_24f78a59514c1550404c69930eb5ff40_cryptolocker
-
Size
37KB
-
Sample
240614-jb7fvazfmh
-
MD5
24f78a59514c1550404c69930eb5ff40
-
SHA1
36ddbd6d0427d8a8e4e80a8d52d40a7f7bf10757
-
SHA256
fdb63c8bfe14dc209a7af5ace32f151863cc41c1944fc8a3e312fc0b33e2a4a8
-
SHA512
46cd1f4d420f51e3ca797aaa99a4abca453f266b47cf936bee1b5437995831f5fe1fd079430dac2fbeb3e58c91b8c6a13bf9772d3339ef79349f262ba3d8d674
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDZJ:bAvJCF+RQgJeab4sbL
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_24f78a59514c1550404c69930eb5ff40_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-14_24f78a59514c1550404c69930eb5ff40_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-14_24f78a59514c1550404c69930eb5ff40_cryptolocker
-
Size
37KB
-
MD5
24f78a59514c1550404c69930eb5ff40
-
SHA1
36ddbd6d0427d8a8e4e80a8d52d40a7f7bf10757
-
SHA256
fdb63c8bfe14dc209a7af5ace32f151863cc41c1944fc8a3e312fc0b33e2a4a8
-
SHA512
46cd1f4d420f51e3ca797aaa99a4abca453f266b47cf936bee1b5437995831f5fe1fd079430dac2fbeb3e58c91b8c6a13bf9772d3339ef79349f262ba3d8d674
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDZJ:bAvJCF+RQgJeab4sbL
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-