General
-
Target
2024-01-18_286f70e33b63a68e67a085f7865785d7_cryptolocker
-
Size
35KB
-
Sample
240118-2gtfaacdc4
-
MD5
286f70e33b63a68e67a085f7865785d7
-
SHA1
b358ce8b06897c9bb739701d38fd3d944c35bc18
-
SHA256
7188fea4abefc87049710cec7aa4fe1264dabddc8a2f4fe87377719f3b2327d1
-
SHA512
164ad0657b5b5b8b2e8a78f47ad29d8095e6098d06ead49d7b0cd69e82925a3d0a98e7e306c160795f318b4b14b22d0e676bbf7c255354c7eea08581f590f9f6
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3a:bxNrC7kYo1Fxf3s06gY
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_286f70e33b63a68e67a085f7865785d7_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-18_286f70e33b63a68e67a085f7865785d7_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-18_286f70e33b63a68e67a085f7865785d7_cryptolocker
-
Size
35KB
-
MD5
286f70e33b63a68e67a085f7865785d7
-
SHA1
b358ce8b06897c9bb739701d38fd3d944c35bc18
-
SHA256
7188fea4abefc87049710cec7aa4fe1264dabddc8a2f4fe87377719f3b2327d1
-
SHA512
164ad0657b5b5b8b2e8a78f47ad29d8095e6098d06ead49d7b0cd69e82925a3d0a98e7e306c160795f318b4b14b22d0e676bbf7c255354c7eea08581f590f9f6
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3a:bxNrC7kYo1Fxf3s06gY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-