General
-
Target
2024-06-14_ce4903ba1f69ffd5fef834c6865866ec_cryptolocker
-
Size
34KB
-
Sample
240614-r49qnsyerr
-
MD5
ce4903ba1f69ffd5fef834c6865866ec
-
SHA1
818ac797da3b059abc18da2c654a62331c242a2c
-
SHA256
9b666b6ec5cb071f301a6c387e068a4cd55b9e3f41e7d06390812b9e668b07d3
-
SHA512
fcfd5c90441482e19d22192682e0325be287d1d0b961b19a0ec2bc2426762cd12db93b8dc2d68aa993959564e975111bc6898ae232ce96e68b6d865d583ae91f
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvJF3c:bG74zYcgT/Ekd0ryfjkbM
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_ce4903ba1f69ffd5fef834c6865866ec_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-14_ce4903ba1f69ffd5fef834c6865866ec_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-14_ce4903ba1f69ffd5fef834c6865866ec_cryptolocker
-
Size
34KB
-
MD5
ce4903ba1f69ffd5fef834c6865866ec
-
SHA1
818ac797da3b059abc18da2c654a62331c242a2c
-
SHA256
9b666b6ec5cb071f301a6c387e068a4cd55b9e3f41e7d06390812b9e668b07d3
-
SHA512
fcfd5c90441482e19d22192682e0325be287d1d0b961b19a0ec2bc2426762cd12db93b8dc2d68aa993959564e975111bc6898ae232ce96e68b6d865d583ae91f
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvJF3c:bG74zYcgT/Ekd0ryfjkbM
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-