General
-
Target
2024-01-25_1376d57c3007d728fb6898e3f785b611_cryptolocker
-
Size
34KB
-
Sample
240125-e157vsgdgn
-
MD5
1376d57c3007d728fb6898e3f785b611
-
SHA1
c10c5ef30a7d016b0c0c987715cf0349d80735ee
-
SHA256
289bf85cae3ea750c02e13bd7d20473425e7a9dc79aeb8fc9f6cd1008910316c
-
SHA512
a88f0d384c431b3fb347423d76a1c6f06af704eb244771e5589de385e2bbd765a72c70ff872c3bb86f1a6e9ed36401fc85737231ae3d6cf4c6c788b9f8849a83
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLLAZ:bA74zYcgT/Ekd0ryfj86U8zbCAZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_1376d57c3007d728fb6898e3f785b611_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_1376d57c3007d728fb6898e3f785b611_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-25_1376d57c3007d728fb6898e3f785b611_cryptolocker
-
Size
34KB
-
MD5
1376d57c3007d728fb6898e3f785b611
-
SHA1
c10c5ef30a7d016b0c0c987715cf0349d80735ee
-
SHA256
289bf85cae3ea750c02e13bd7d20473425e7a9dc79aeb8fc9f6cd1008910316c
-
SHA512
a88f0d384c431b3fb347423d76a1c6f06af704eb244771e5589de385e2bbd765a72c70ff872c3bb86f1a6e9ed36401fc85737231ae3d6cf4c6c788b9f8849a83
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLLAZ:bA74zYcgT/Ekd0ryfj86U8zbCAZ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-