General
-
Target
2024-01-29_802b16c69d76dbc323cd75090fb9e9dc_cryptolocker
-
Size
63KB
-
Sample
240129-g7g5qaddhl
-
MD5
802b16c69d76dbc323cd75090fb9e9dc
-
SHA1
5440b16409081025e9e73902ea07e26f221e2acb
-
SHA256
bc197cae2499addba32843794e638bec5484272e5adcb279c3ebfe1d3a494819
-
SHA512
e3fcee58f620fc1e195c17118b450aa327e935ec3e80b7e9d533e8a215dd9ebf6424a0b97e2bcd7027479025208e86ad52bbd293fc159ba4c5757398131877dd
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVn:ZVxkGOtEvwDpjcaw9
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_802b16c69d76dbc323cd75090fb9e9dc_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_802b16c69d76dbc323cd75090fb9e9dc_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-29_802b16c69d76dbc323cd75090fb9e9dc_cryptolocker
-
Size
63KB
-
MD5
802b16c69d76dbc323cd75090fb9e9dc
-
SHA1
5440b16409081025e9e73902ea07e26f221e2acb
-
SHA256
bc197cae2499addba32843794e638bec5484272e5adcb279c3ebfe1d3a494819
-
SHA512
e3fcee58f620fc1e195c17118b450aa327e935ec3e80b7e9d533e8a215dd9ebf6424a0b97e2bcd7027479025208e86ad52bbd293fc159ba4c5757398131877dd
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVn:ZVxkGOtEvwDpjcaw9
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-