General
-
Target
2024-01-26_2951f53d0349dfcf9bed8e097a8e49ea_cryptolocker
-
Size
40KB
-
Sample
240126-bxkj7sbdg7
-
MD5
2951f53d0349dfcf9bed8e097a8e49ea
-
SHA1
b9f72147d1b42d9c475ca93cd763a59f0bc7c4cc
-
SHA256
a7250b8c3c9c6739bc336b94824a89dc0b2560a45f4f2358a47d2ca7ae3c32d1
-
SHA512
2a2c05b45143d77a060546f9436710f94eeb423296f1522ba0311cf985d3296c3f337688a28b7033b995c63a66fdd9b480faaf98083c5e2e84e1f54eb7f5b1a3
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqu:bxNrC7kYo1Fxf3s05rwxbFz
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_2951f53d0349dfcf9bed8e097a8e49ea_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-26_2951f53d0349dfcf9bed8e097a8e49ea_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-26_2951f53d0349dfcf9bed8e097a8e49ea_cryptolocker
-
Size
40KB
-
MD5
2951f53d0349dfcf9bed8e097a8e49ea
-
SHA1
b9f72147d1b42d9c475ca93cd763a59f0bc7c4cc
-
SHA256
a7250b8c3c9c6739bc336b94824a89dc0b2560a45f4f2358a47d2ca7ae3c32d1
-
SHA512
2a2c05b45143d77a060546f9436710f94eeb423296f1522ba0311cf985d3296c3f337688a28b7033b995c63a66fdd9b480faaf98083c5e2e84e1f54eb7f5b1a3
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqu:bxNrC7kYo1Fxf3s05rwxbFz
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-