General
-
Target
2024-01-25_af1e7bdf89dadc65caeebe5143502b94_cryptolocker
-
Size
46KB
-
Sample
240125-nnfacafehm
-
MD5
af1e7bdf89dadc65caeebe5143502b94
-
SHA1
61afb8de3b61675ea9cb97106739a39a1b5f4269
-
SHA256
e15d1764d657b46662117c84bcd4ca46e7041819e8d53f74223d11f1bbae52b2
-
SHA512
ee61c24ec4757ad251b4ba1c6cf96a50767cbd90b27628b1720ea85541dcea3376142071c8a453ee63ef5e88e29646cbe42b8cf340c09d7536da555152d4c45d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hS4:bgGYcA/53GAA6y37nbS4
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_af1e7bdf89dadc65caeebe5143502b94_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_af1e7bdf89dadc65caeebe5143502b94_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_af1e7bdf89dadc65caeebe5143502b94_cryptolocker
-
Size
46KB
-
MD5
af1e7bdf89dadc65caeebe5143502b94
-
SHA1
61afb8de3b61675ea9cb97106739a39a1b5f4269
-
SHA256
e15d1764d657b46662117c84bcd4ca46e7041819e8d53f74223d11f1bbae52b2
-
SHA512
ee61c24ec4757ad251b4ba1c6cf96a50767cbd90b27628b1720ea85541dcea3376142071c8a453ee63ef5e88e29646cbe42b8cf340c09d7536da555152d4c45d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hS4:bgGYcA/53GAA6y37nbS4
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-