General
-
Target
2024-01-24_ff58daef49b1bed03c1d2ee2fa205afe_cryptolocker
-
Size
51KB
-
Sample
240124-fjw4asbbem
-
MD5
ff58daef49b1bed03c1d2ee2fa205afe
-
SHA1
450183c7f11e8f5063e034a867d64d01129d9880
-
SHA256
db10fc08c2c2ae7ede9a55bbab2ffd1010eac84e8648f73d4396a130df6bfdff
-
SHA512
f39afa5135a795cbde54292028a0c14a67dc9d9be5438279001b4cafb78e820bfed7b34f13dfc305dd75e9e73953598ece7a369df4cee90a82e627344fee91f3
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9fHEO:bIDOw9a0DwitDZzER
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_ff58daef49b1bed03c1d2ee2fa205afe_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_ff58daef49b1bed03c1d2ee2fa205afe_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-24_ff58daef49b1bed03c1d2ee2fa205afe_cryptolocker
-
Size
51KB
-
MD5
ff58daef49b1bed03c1d2ee2fa205afe
-
SHA1
450183c7f11e8f5063e034a867d64d01129d9880
-
SHA256
db10fc08c2c2ae7ede9a55bbab2ffd1010eac84e8648f73d4396a130df6bfdff
-
SHA512
f39afa5135a795cbde54292028a0c14a67dc9d9be5438279001b4cafb78e820bfed7b34f13dfc305dd75e9e73953598ece7a369df4cee90a82e627344fee91f3
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9fHEO:bIDOw9a0DwitDZzER
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-