General
-
Target
2024-01-23_14c82a8e55b46ae743b03ba3f6991e75_cryptolocker
-
Size
38KB
-
Sample
240123-g421qaggc9
-
MD5
14c82a8e55b46ae743b03ba3f6991e75
-
SHA1
b0971180cc989ab2c315b5ba880e41cb47c9b75c
-
SHA256
3f29780c12d97ee61a9c5422fce45341d158692e017471a0a5b3fc5cc209498a
-
SHA512
4c097115c6fa4cdebbc7b24abe386e2fe19fc6a1a488974b085217c9544ab7dc68d0e950127401ed9535c487e8d4d7530f1565a6baf28bc87a41a13f3ba36035
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6Us/:bAvJCYOOvbRPDEgXrNekd7l94i3py/yT
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_14c82a8e55b46ae743b03ba3f6991e75_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_14c82a8e55b46ae743b03ba3f6991e75_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-23_14c82a8e55b46ae743b03ba3f6991e75_cryptolocker
-
Size
38KB
-
MD5
14c82a8e55b46ae743b03ba3f6991e75
-
SHA1
b0971180cc989ab2c315b5ba880e41cb47c9b75c
-
SHA256
3f29780c12d97ee61a9c5422fce45341d158692e017471a0a5b3fc5cc209498a
-
SHA512
4c097115c6fa4cdebbc7b24abe386e2fe19fc6a1a488974b085217c9544ab7dc68d0e950127401ed9535c487e8d4d7530f1565a6baf28bc87a41a13f3ba36035
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6Us/:bAvJCYOOvbRPDEgXrNekd7l94i3py/yT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-