General
-
Target
2024-01-28_7b1ad8a2f2c111f2220a2aa0e63c2ca1_cryptolocker
-
Size
35KB
-
Sample
240128-pvvjaacedr
-
MD5
7b1ad8a2f2c111f2220a2aa0e63c2ca1
-
SHA1
2712be799b7dec70d3b6439aa32b6ebc55684bf3
-
SHA256
0f018c295358f400ca87b53aa534248247c59fd8729571a2800f8e7d0e0a3816
-
SHA512
e594ef64b1ccc9c5e9384c2421aaf5ce47efa0b2d0cf8c8357ab5283301caa37da325e207aea47d182872d5afdb2a462e4d99f9d02dbe7560b8e1a07544274a5
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lWVNs:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3s
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_7b1ad8a2f2c111f2220a2aa0e63c2ca1_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_7b1ad8a2f2c111f2220a2aa0e63c2ca1_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_7b1ad8a2f2c111f2220a2aa0e63c2ca1_cryptolocker
-
Size
35KB
-
MD5
7b1ad8a2f2c111f2220a2aa0e63c2ca1
-
SHA1
2712be799b7dec70d3b6439aa32b6ebc55684bf3
-
SHA256
0f018c295358f400ca87b53aa534248247c59fd8729571a2800f8e7d0e0a3816
-
SHA512
e594ef64b1ccc9c5e9384c2421aaf5ce47efa0b2d0cf8c8357ab5283301caa37da325e207aea47d182872d5afdb2a462e4d99f9d02dbe7560b8e1a07544274a5
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lWVNs:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3s
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-