General
-
Target
2024-06-14_9fa5d693e7c6230ac9d9c69616c9ec95_cryptolocker
-
Size
42KB
-
Sample
240614-jq4nha1dkf
-
MD5
9fa5d693e7c6230ac9d9c69616c9ec95
-
SHA1
4292b6f04ea1a5c21eb5d89644474c8ad5d483c3
-
SHA256
43869431b7e4f30708c2824486d7208416ad95d7f73194dd0485c43b3bd78990
-
SHA512
93b92761e6bb06a643c5e9dbde272a038b1e695bbf5a616b6c06b056f78dfd7296601ddc1b733ec6d63264eb65143808d1271c5365c466f98908222de6423540
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7xfy:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7Zy
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_9fa5d693e7c6230ac9d9c69616c9ec95_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-14_9fa5d693e7c6230ac9d9c69616c9ec95_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-14_9fa5d693e7c6230ac9d9c69616c9ec95_cryptolocker
-
Size
42KB
-
MD5
9fa5d693e7c6230ac9d9c69616c9ec95
-
SHA1
4292b6f04ea1a5c21eb5d89644474c8ad5d483c3
-
SHA256
43869431b7e4f30708c2824486d7208416ad95d7f73194dd0485c43b3bd78990
-
SHA512
93b92761e6bb06a643c5e9dbde272a038b1e695bbf5a616b6c06b056f78dfd7296601ddc1b733ec6d63264eb65143808d1271c5365c466f98908222de6423540
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7xfy:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7Zy
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-