General
-
Target
2024-01-26_cf171599c33712c9d9974459532e1b1f_cryptolocker
-
Size
45KB
-
Sample
240126-1a6xcsefh2
-
MD5
cf171599c33712c9d9974459532e1b1f
-
SHA1
ada459e1445488b0a4df3241b8f7cc685fd4ee8d
-
SHA256
6e02c7903c0d868e5e15df61e383f5fea70fbe1632d5876cb160a05b3f378d6b
-
SHA512
50cdfcb60fd42209a2935fff7476b97cbd86a8b35bbfb78a4cf322bbbd3825f8f8ee0ef1a68b70dd40f20d6aa67edc16fcbeb5a8cb0482cd651db86ce1a984ec
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvb:bgGYcA/53GAA6y37nbz
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_cf171599c33712c9d9974459532e1b1f_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_cf171599c33712c9d9974459532e1b1f_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-26_cf171599c33712c9d9974459532e1b1f_cryptolocker
-
Size
45KB
-
MD5
cf171599c33712c9d9974459532e1b1f
-
SHA1
ada459e1445488b0a4df3241b8f7cc685fd4ee8d
-
SHA256
6e02c7903c0d868e5e15df61e383f5fea70fbe1632d5876cb160a05b3f378d6b
-
SHA512
50cdfcb60fd42209a2935fff7476b97cbd86a8b35bbfb78a4cf322bbbd3825f8f8ee0ef1a68b70dd40f20d6aa67edc16fcbeb5a8cb0482cd651db86ce1a984ec
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvb:bgGYcA/53GAA6y37nbz
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-