General
-
Target
2024-02-01_fcbfc0422a0f4eef7adc8f675f240cc0_cryptolocker
-
Size
384KB
-
Sample
240201-y2jvssfgcp
-
MD5
fcbfc0422a0f4eef7adc8f675f240cc0
-
SHA1
456fe60ad24898bc3b61a876ff4e097355daa3ec
-
SHA256
b0c515a6b04f7c83ed5e101d8f08aad311d556b324d5cdb370c94ff7fd42299a
-
SHA512
babf0aa80fc27c73b51cb1abb156f4182b2606d14bf87f7cf35c31a68b7fada65cc177affc909e0b6e4a50e1881898ba7dce27c1bdb3843e47acf31bbec6b11d
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXO:nnOflT/ZFIjBz3xjTxynGUOUhXO
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-01_fcbfc0422a0f4eef7adc8f675f240cc0_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-01_fcbfc0422a0f4eef7adc8f675f240cc0_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-01_fcbfc0422a0f4eef7adc8f675f240cc0_cryptolocker
-
Size
384KB
-
MD5
fcbfc0422a0f4eef7adc8f675f240cc0
-
SHA1
456fe60ad24898bc3b61a876ff4e097355daa3ec
-
SHA256
b0c515a6b04f7c83ed5e101d8f08aad311d556b324d5cdb370c94ff7fd42299a
-
SHA512
babf0aa80fc27c73b51cb1abb156f4182b2606d14bf87f7cf35c31a68b7fada65cc177affc909e0b6e4a50e1881898ba7dce27c1bdb3843e47acf31bbec6b11d
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXO:nnOflT/ZFIjBz3xjTxynGUOUhXO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-