General
-
Target
2024-01-25_d4c650239bc932a6eb4b40430175ad77_cryptolocker
-
Size
39KB
-
Sample
240125-v7n5xscgcp
-
MD5
d4c650239bc932a6eb4b40430175ad77
-
SHA1
85ae055d03c90df94cb4f665b95f151c5e9dd9a3
-
SHA256
01106d5ec49f56920729252a625cb7787347acb63963b2c52efb07375962d9fa
-
SHA512
5e6a506b2a9e4b0a21dd17e7e2e5abb29f6e01f5920874c86bd4b88b083e5aaf54b88f57299b8396e41054f712860d07e7853e7da17125d920989be815e14ac8
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKm:bIDOw9a0Dwo3P1ojvUSDh4
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_d4c650239bc932a6eb4b40430175ad77_cryptolocker.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_d4c650239bc932a6eb4b40430175ad77_cryptolocker
-
Size
39KB
-
MD5
d4c650239bc932a6eb4b40430175ad77
-
SHA1
85ae055d03c90df94cb4f665b95f151c5e9dd9a3
-
SHA256
01106d5ec49f56920729252a625cb7787347acb63963b2c52efb07375962d9fa
-
SHA512
5e6a506b2a9e4b0a21dd17e7e2e5abb29f6e01f5920874c86bd4b88b083e5aaf54b88f57299b8396e41054f712860d07e7853e7da17125d920989be815e14ac8
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKm:bIDOw9a0Dwo3P1ojvUSDh4
-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-