General
-
Target
2024-01-29_c2c8e8adb921a1e2e4abedf25271f191_cryptolocker
-
Size
41KB
-
Sample
240129-v4benafbc4
-
MD5
c2c8e8adb921a1e2e4abedf25271f191
-
SHA1
529725e77b829e2b88822bb3a6a759256e8cc319
-
SHA256
ab6b0237d1f05f923932546e4b22b217ad0372ee0b9dc200bbca31e0d749d68f
-
SHA512
f046326fab79576f69b946a4fb4295ccd01f495abd27aa6238a3952f7f071ce9fa1485cd971cc6cc37873f93608daab732e582749ea350e61fe49ef55104776e
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMvcWf:bc/y2lkF0+B2V
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_c2c8e8adb921a1e2e4abedf25271f191_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_c2c8e8adb921a1e2e4abedf25271f191_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-29_c2c8e8adb921a1e2e4abedf25271f191_cryptolocker
-
Size
41KB
-
MD5
c2c8e8adb921a1e2e4abedf25271f191
-
SHA1
529725e77b829e2b88822bb3a6a759256e8cc319
-
SHA256
ab6b0237d1f05f923932546e4b22b217ad0372ee0b9dc200bbca31e0d749d68f
-
SHA512
f046326fab79576f69b946a4fb4295ccd01f495abd27aa6238a3952f7f071ce9fa1485cd971cc6cc37873f93608daab732e582749ea350e61fe49ef55104776e
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMvcWf:bc/y2lkF0+B2V
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-