General
-
Target
2024-01-25_f6bff67e630183ca574c3f561832210b_cryptolocker
-
Size
37KB
-
Sample
240125-vmp7gsbce3
-
MD5
f6bff67e630183ca574c3f561832210b
-
SHA1
5a658e017600ce7087930706117cf55e86f1cbfb
-
SHA256
17d76f5eedc6baad47a92a371d8d52521bf51c09fa794cb36816dcd0dc938630
-
SHA512
1d7b2a2f349d03101ed9b7bacbad9b647598df89afce6edb59e50dac01bbb2a74a043fbb67446d762261099f0390bd2321c9a8dd591b1d5cc21da1a3564b528f
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nb/mViF:bAvJCYOOvbRPDEgXrNekd7l94i3p/ht
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_f6bff67e630183ca574c3f561832210b_cryptolocker.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
2024-01-25_f6bff67e630183ca574c3f561832210b_cryptolocker
-
Size
37KB
-
MD5
f6bff67e630183ca574c3f561832210b
-
SHA1
5a658e017600ce7087930706117cf55e86f1cbfb
-
SHA256
17d76f5eedc6baad47a92a371d8d52521bf51c09fa794cb36816dcd0dc938630
-
SHA512
1d7b2a2f349d03101ed9b7bacbad9b647598df89afce6edb59e50dac01bbb2a74a043fbb67446d762261099f0390bd2321c9a8dd591b1d5cc21da1a3564b528f
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nb/mViF:bAvJCYOOvbRPDEgXrNekd7l94i3p/ht
-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-