General
-
Target
2024-06-14_46d6f58b5e0c4b2fae80f0ef98ae2527_cryptolocker
-
Size
34KB
-
Sample
240614-rxddwsyclq
-
MD5
46d6f58b5e0c4b2fae80f0ef98ae2527
-
SHA1
b5fe28d9d5f4e31715affd8a792814edcfe8909e
-
SHA256
781b04bc37cca57738860b30e24eae1a77f93634c0f857cca76ca5c96393783e
-
SHA512
b286c9918015b66f2bf46462400c6f6bc1ca6d82447c465a4189c844f2fdadf9b4473a04ee70fdf4764917f6e54f09ccbdafcf348eb5b23f9e9979ed54346fa6
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvJF3J:bG74zYcgT/Ekd0ryfjkb5
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_46d6f58b5e0c4b2fae80f0ef98ae2527_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-14_46d6f58b5e0c4b2fae80f0ef98ae2527_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-14_46d6f58b5e0c4b2fae80f0ef98ae2527_cryptolocker
-
Size
34KB
-
MD5
46d6f58b5e0c4b2fae80f0ef98ae2527
-
SHA1
b5fe28d9d5f4e31715affd8a792814edcfe8909e
-
SHA256
781b04bc37cca57738860b30e24eae1a77f93634c0f857cca76ca5c96393783e
-
SHA512
b286c9918015b66f2bf46462400c6f6bc1ca6d82447c465a4189c844f2fdadf9b4473a04ee70fdf4764917f6e54f09ccbdafcf348eb5b23f9e9979ed54346fa6
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvJF3J:bG74zYcgT/Ekd0ryfjkb5
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-