General
-
Target
2024-01-25_7b0d05c22416cf705f52e2f152c3aec0_cryptolocker
-
Size
50KB
-
Sample
240125-s3aqmahhc3
-
MD5
7b0d05c22416cf705f52e2f152c3aec0
-
SHA1
58d000ccf84d721888232ff84bf3b92ea3b20fdd
-
SHA256
a563e74c8a8b58cd5fb7e8791761e59bd9b03d1b53811510643b7aac3566e17f
-
SHA512
658acc37cf89a7aeb18cb4c188093d5d83a54548e5369bf50788f21115b6fc8bcf1120631d07139974939949674aad732e6c558543c94960bb261facbd9910d4
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9gE1NI2:bIDOw9a0DwitDZzwI2
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_7b0d05c22416cf705f52e2f152c3aec0_cryptolocker.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_7b0d05c22416cf705f52e2f152c3aec0_cryptolocker
-
Size
50KB
-
MD5
7b0d05c22416cf705f52e2f152c3aec0
-
SHA1
58d000ccf84d721888232ff84bf3b92ea3b20fdd
-
SHA256
a563e74c8a8b58cd5fb7e8791761e59bd9b03d1b53811510643b7aac3566e17f
-
SHA512
658acc37cf89a7aeb18cb4c188093d5d83a54548e5369bf50788f21115b6fc8bcf1120631d07139974939949674aad732e6c558543c94960bb261facbd9910d4
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9gE1NI2:bIDOw9a0DwitDZzwI2
-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-