General
-
Target
2024-06-14_3d2e95d0abceec1098e557331b46d7bf_cryptolocker
-
Size
45KB
-
Sample
240614-z9r2tawgjf
-
MD5
3d2e95d0abceec1098e557331b46d7bf
-
SHA1
aeb567b11bfbd7e9c0d9bca2819393ad52ab4989
-
SHA256
da4f38cf0fb1f663285070e5724e8a27d1de2ec1f6b8eb198756c3a3d8484c9d
-
SHA512
f32925e72b4c1c79646cc64a69f3377041b89f1e236162efff7e61899ab6c097c471cc883d002275d5c4316476ecb711a6a6c3666024148bf1a3937235b75d75
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8W:bm74zYcgT/EkM0ryfjPdQZW
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_3d2e95d0abceec1098e557331b46d7bf_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-14_3d2e95d0abceec1098e557331b46d7bf_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-14_3d2e95d0abceec1098e557331b46d7bf_cryptolocker
-
Size
45KB
-
MD5
3d2e95d0abceec1098e557331b46d7bf
-
SHA1
aeb567b11bfbd7e9c0d9bca2819393ad52ab4989
-
SHA256
da4f38cf0fb1f663285070e5724e8a27d1de2ec1f6b8eb198756c3a3d8484c9d
-
SHA512
f32925e72b4c1c79646cc64a69f3377041b89f1e236162efff7e61899ab6c097c471cc883d002275d5c4316476ecb711a6a6c3666024148bf1a3937235b75d75
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadQC8W:bm74zYcgT/EkM0ryfjPdQZW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-