General
-
Target
2024-02-02_91d5811cd91e5bad5c871591e6b07455_cryptolocker
-
Size
41KB
-
Sample
240202-jfh9tabagq
-
MD5
91d5811cd91e5bad5c871591e6b07455
-
SHA1
5eddaabd061210172aa057cc0790e7041c78cab6
-
SHA256
610816c1ea15bfd01c797164e4df796abaa4684d86bb48c44f2e7bf001527442
-
SHA512
6c65a53e7286df847ccd93e74c7cb51b582fdb9a3f9026e87d4aa07ac2ad402322dc85d8e837ca61935837fd94eef35e7b17cfe30635c2f498efd2b9dd7aec61
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+sHO:bgGYcA/53GADw8ClKO
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_91d5811cd91e5bad5c871591e6b07455_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-02_91d5811cd91e5bad5c871591e6b07455_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-02_91d5811cd91e5bad5c871591e6b07455_cryptolocker
-
Size
41KB
-
MD5
91d5811cd91e5bad5c871591e6b07455
-
SHA1
5eddaabd061210172aa057cc0790e7041c78cab6
-
SHA256
610816c1ea15bfd01c797164e4df796abaa4684d86bb48c44f2e7bf001527442
-
SHA512
6c65a53e7286df847ccd93e74c7cb51b582fdb9a3f9026e87d4aa07ac2ad402322dc85d8e837ca61935837fd94eef35e7b17cfe30635c2f498efd2b9dd7aec61
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+sHO:bgGYcA/53GADw8ClKO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-