General
-
Target
2024-01-28_de1915c2f2e24033ca3afb0d02b8ba1b_cryptolocker
-
Size
33KB
-
Sample
240128-p4ejesbbb9
-
MD5
de1915c2f2e24033ca3afb0d02b8ba1b
-
SHA1
a39ccb7776b39dd9b50da57f2cbba58d95674585
-
SHA256
fab99cb387a7e1fa108fec33881be1245a97aadd2a7803af3b1637c0cf6cf6d5
-
SHA512
d118df8f59cb97c9ae1fc1f239013d6dd0270274aff747ca321d843bc338847561b4620cdee4358886573772ea26d13be0a7f7492f6116fda01495a0ee2eb001
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLg+:bA74zYcgT/Ekd0ryfj86U8zbQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_de1915c2f2e24033ca3afb0d02b8ba1b_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-28_de1915c2f2e24033ca3afb0d02b8ba1b_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_de1915c2f2e24033ca3afb0d02b8ba1b_cryptolocker
-
Size
33KB
-
MD5
de1915c2f2e24033ca3afb0d02b8ba1b
-
SHA1
a39ccb7776b39dd9b50da57f2cbba58d95674585
-
SHA256
fab99cb387a7e1fa108fec33881be1245a97aadd2a7803af3b1637c0cf6cf6d5
-
SHA512
d118df8f59cb97c9ae1fc1f239013d6dd0270274aff747ca321d843bc338847561b4620cdee4358886573772ea26d13be0a7f7492f6116fda01495a0ee2eb001
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLg+:bA74zYcgT/Ekd0ryfj86U8zbQ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-