General
-
Target
2024-01-29_34eb7375095c79daf2af90bea273399f_cryptolocker
-
Size
41KB
-
Sample
240129-f6txfsceel
-
MD5
34eb7375095c79daf2af90bea273399f
-
SHA1
d6697099161dd2444c23d65c027f826a51d138c0
-
SHA256
9399fec7fdb9ee791a565e2e0fabe3f3a891e12214fbc3d48f43f29d94b87561
-
SHA512
6a631ed3b3ff6c4f16592fff2da97cc28fe7e772793ed1b95a8839bbe272d74415524ba8c5b5dece2a71c7f2e623aa99999993b0aa1cc7ce908a9d8211e3fdb6
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqmz59k:bc/y2lkF0+Bjq9k
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_34eb7375095c79daf2af90bea273399f_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_34eb7375095c79daf2af90bea273399f_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-29_34eb7375095c79daf2af90bea273399f_cryptolocker
-
Size
41KB
-
MD5
34eb7375095c79daf2af90bea273399f
-
SHA1
d6697099161dd2444c23d65c027f826a51d138c0
-
SHA256
9399fec7fdb9ee791a565e2e0fabe3f3a891e12214fbc3d48f43f29d94b87561
-
SHA512
6a631ed3b3ff6c4f16592fff2da97cc28fe7e772793ed1b95a8839bbe272d74415524ba8c5b5dece2a71c7f2e623aa99999993b0aa1cc7ce908a9d8211e3fdb6
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqmz59k:bc/y2lkF0+Bjq9k
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-