General
-
Target
2024-01-23_c49d309ee24d5eac93316201d2716282_cryptolocker
-
Size
41KB
-
Sample
240123-2g8j7sbge4
-
MD5
c49d309ee24d5eac93316201d2716282
-
SHA1
6c6172509401cd74d8b53574818bdf1f76114ace
-
SHA256
7b7d7f801f789300f909f73e0e1ed01dadefa25c5b17a1a78d124151c6f10a2e
-
SHA512
ad63f23480f39a37b9a03fb39ceb5bd32a303ce51260552150670a6e960025bca02fa36b0e2b42bf5d6a06ccac3b2255c83b93a256f1089396563ebb16302ff9
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq7:bc/y2lkF0+Bj7
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_c49d309ee24d5eac93316201d2716282_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_c49d309ee24d5eac93316201d2716282_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-23_c49d309ee24d5eac93316201d2716282_cryptolocker
-
Size
41KB
-
MD5
c49d309ee24d5eac93316201d2716282
-
SHA1
6c6172509401cd74d8b53574818bdf1f76114ace
-
SHA256
7b7d7f801f789300f909f73e0e1ed01dadefa25c5b17a1a78d124151c6f10a2e
-
SHA512
ad63f23480f39a37b9a03fb39ceb5bd32a303ce51260552150670a6e960025bca02fa36b0e2b42bf5d6a06ccac3b2255c83b93a256f1089396563ebb16302ff9
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq7:bc/y2lkF0+Bj7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-