General
-
Target
2024-02-02_c8feb07c6f819c535b832fd2a1a75a76_cryptolocker
-
Size
40KB
-
Sample
240202-kh2plscbdj
-
MD5
c8feb07c6f819c535b832fd2a1a75a76
-
SHA1
32074b15ce2805fe8df3eab5b0279050c71b3143
-
SHA256
4449dd77f92618fbb81917e29742eae5d91260edae5cccbbe2c3a2866f80b09b
-
SHA512
3bdfbca6ffc02384b2f02db520546e0ce3693d6ccfa4b8937bbc21955aefa7c09b807c5047c4e2dd0e7b0ef526b569b50e1a8763f8ac90ebd971234cc6649047
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc52DiQ:bgGYcA/53GADw8ClrcIuQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_c8feb07c6f819c535b832fd2a1a75a76_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-02_c8feb07c6f819c535b832fd2a1a75a76_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-02_c8feb07c6f819c535b832fd2a1a75a76_cryptolocker
-
Size
40KB
-
MD5
c8feb07c6f819c535b832fd2a1a75a76
-
SHA1
32074b15ce2805fe8df3eab5b0279050c71b3143
-
SHA256
4449dd77f92618fbb81917e29742eae5d91260edae5cccbbe2c3a2866f80b09b
-
SHA512
3bdfbca6ffc02384b2f02db520546e0ce3693d6ccfa4b8937bbc21955aefa7c09b807c5047c4e2dd0e7b0ef526b569b50e1a8763f8ac90ebd971234cc6649047
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc52DiQ:bgGYcA/53GADw8ClrcIuQ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-