General
-
Target
2024-01-23_df2982caab8ad5a7cdb6eb5377e12fef_cryptolocker
-
Size
46KB
-
Sample
240123-hbs3sagcal
-
MD5
df2982caab8ad5a7cdb6eb5377e12fef
-
SHA1
b9138b5dc7237dc336cb36d6c6155457b282c80e
-
SHA256
c2464038cc97f393257b970b0f9be2196a2c4cc9ba06e380565d07c097b7dc2a
-
SHA512
4f3916ac1381a8029a2b0cb88659f4ff93d61c3af1fad6cb1559c977d2aa4f3c0766efa0a25231a5cfe9f568b1be3f38c1537f942ed4da873ee248047d524984
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dd+Ay:bgGYcA/53GAA6y37Q6ddty
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_df2982caab8ad5a7cdb6eb5377e12fef_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_df2982caab8ad5a7cdb6eb5377e12fef_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-23_df2982caab8ad5a7cdb6eb5377e12fef_cryptolocker
-
Size
46KB
-
MD5
df2982caab8ad5a7cdb6eb5377e12fef
-
SHA1
b9138b5dc7237dc336cb36d6c6155457b282c80e
-
SHA256
c2464038cc97f393257b970b0f9be2196a2c4cc9ba06e380565d07c097b7dc2a
-
SHA512
4f3916ac1381a8029a2b0cb88659f4ff93d61c3af1fad6cb1559c977d2aa4f3c0766efa0a25231a5cfe9f568b1be3f38c1537f942ed4da873ee248047d524984
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dd+Ay:bgGYcA/53GAA6y37Q6ddty
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-