General
-
Target
2024-01-25_448cd77c0907643ee262e3c1a0b171c0_cryptolocker
-
Size
30KB
-
Sample
240125-sxzgssafgq
-
MD5
448cd77c0907643ee262e3c1a0b171c0
-
SHA1
a361483d6a0af007221c185b269fcd4abdd431da
-
SHA256
ebe5f73ed9f2dfce29830d687c0fff2bdef3d5a30b84ee2b24348148fb7b0cf2
-
SHA512
8f11108b97e8936a9b0435286dcb1fb2c38e30977ad4aae79c51966401a42fb396faf7f42b6aeb753b5637b216349f2024560a50afbce224b9f08426c3814712
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIyNc:bA74zYcgT/Ekd0ryfjPIunty
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_448cd77c0907643ee262e3c1a0b171c0_cryptolocker.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_448cd77c0907643ee262e3c1a0b171c0_cryptolocker
-
Size
30KB
-
MD5
448cd77c0907643ee262e3c1a0b171c0
-
SHA1
a361483d6a0af007221c185b269fcd4abdd431da
-
SHA256
ebe5f73ed9f2dfce29830d687c0fff2bdef3d5a30b84ee2b24348148fb7b0cf2
-
SHA512
8f11108b97e8936a9b0435286dcb1fb2c38e30977ad4aae79c51966401a42fb396faf7f42b6aeb753b5637b216349f2024560a50afbce224b9f08426c3814712
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIyNc:bA74zYcgT/Ekd0ryfjPIunty
-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-