General
-
Target
2024-01-22_10b97bd946f5598173b555d23f31df59_cryptolocker
-
Size
35KB
-
Sample
240122-sthd4shgbk
-
MD5
10b97bd946f5598173b555d23f31df59
-
SHA1
b921a7a19cca837c364d7381b7326edf8b4b77c3
-
SHA256
2194bafc47a120b83a7949fb014d30f962936a45133c7a962cd70ca38a068985
-
SHA512
79db0b1417b896b557189f7bdb1ff0894088311d6a85c4057155cca7dc32a64ebe9cd5e63cdce67f4d55f956fbd90c00ed1358f27af994025bfe525b7db2a616
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3m:bxNrC7kYo1Fxf3s06gM
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-22_10b97bd946f5598173b555d23f31df59_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-22_10b97bd946f5598173b555d23f31df59_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-22_10b97bd946f5598173b555d23f31df59_cryptolocker
-
Size
35KB
-
MD5
10b97bd946f5598173b555d23f31df59
-
SHA1
b921a7a19cca837c364d7381b7326edf8b4b77c3
-
SHA256
2194bafc47a120b83a7949fb014d30f962936a45133c7a962cd70ca38a068985
-
SHA512
79db0b1417b896b557189f7bdb1ff0894088311d6a85c4057155cca7dc32a64ebe9cd5e63cdce67f4d55f956fbd90c00ed1358f27af994025bfe525b7db2a616
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3m:bxNrC7kYo1Fxf3s06gM
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-