General
-
Target
2024-01-27_3d58d73eebf1bb5d8d7bd5e3b5cb1e21_cryptolocker
-
Size
41KB
-
Sample
240127-x6rwjaccbp
-
MD5
3d58d73eebf1bb5d8d7bd5e3b5cb1e21
-
SHA1
d8c2a50223a863e6b86993356c85c2e5b3d8b1c8
-
SHA256
5662f0e6361e0fe939b9425edab2f34c28abc4776d7bb17e3e340c7a4f56b9d3
-
SHA512
d6f59f9a9f0cd4646b74efb105ded3644f2f5bafe070854014ed279c20f5db8d59b97819769573290e1eb6f2c6ea6e321eae31461f3aaf3293188ed48cf2d450
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq0:bc/y2lkF0+Bj0
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_3d58d73eebf1bb5d8d7bd5e3b5cb1e21_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-27_3d58d73eebf1bb5d8d7bd5e3b5cb1e21_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-27_3d58d73eebf1bb5d8d7bd5e3b5cb1e21_cryptolocker
-
Size
41KB
-
MD5
3d58d73eebf1bb5d8d7bd5e3b5cb1e21
-
SHA1
d8c2a50223a863e6b86993356c85c2e5b3d8b1c8
-
SHA256
5662f0e6361e0fe939b9425edab2f34c28abc4776d7bb17e3e340c7a4f56b9d3
-
SHA512
d6f59f9a9f0cd4646b74efb105ded3644f2f5bafe070854014ed279c20f5db8d59b97819769573290e1eb6f2c6ea6e321eae31461f3aaf3293188ed48cf2d450
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRq0:bc/y2lkF0+Bj0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-