General
-
Target
2024-01-27_58161c8363ea5ab0aeabee7c4990334d_cryptolocker
-
Size
33KB
-
Sample
240127-czbwhsbch5
-
MD5
58161c8363ea5ab0aeabee7c4990334d
-
SHA1
3eebe3d7b036756f6242a8ded2eb1857f77f3b88
-
SHA256
2b59b346b014653a7f21c8e9822b4f623a913d42e8a71c732a35203858c8e078
-
SHA512
0fe8f2e6e5627c8aa2c11f447a077625c30eabca49dc9e9d6ff451e6b1c29aa4e3a3f21d2e6d4647823b8222e8c4d7c3edd105ef9883b6496756bfb8fe78b389
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6A0D8p:b/yC4GyNM01GuQMNXw2PSjH+D8p
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_58161c8363ea5ab0aeabee7c4990334d_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-27_58161c8363ea5ab0aeabee7c4990334d_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-27_58161c8363ea5ab0aeabee7c4990334d_cryptolocker
-
Size
33KB
-
MD5
58161c8363ea5ab0aeabee7c4990334d
-
SHA1
3eebe3d7b036756f6242a8ded2eb1857f77f3b88
-
SHA256
2b59b346b014653a7f21c8e9822b4f623a913d42e8a71c732a35203858c8e078
-
SHA512
0fe8f2e6e5627c8aa2c11f447a077625c30eabca49dc9e9d6ff451e6b1c29aa4e3a3f21d2e6d4647823b8222e8c4d7c3edd105ef9883b6496756bfb8fe78b389
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6A0D8p:b/yC4GyNM01GuQMNXw2PSjH+D8p
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-