General
-
Target
2024-02-02_8c065bac60051cc55eeaf2be8aaa99b0_cryptolocker
-
Size
38KB
-
Sample
240202-sygy5sbehj
-
MD5
8c065bac60051cc55eeaf2be8aaa99b0
-
SHA1
a36aa541789aef871cf3e7815ccda9ec590a88b5
-
SHA256
7bb96cfa51e4fb20481863968321a2a22904c98213c6c779fc2e0478cbb57c5f
-
SHA512
d666b1893c74d548275a2f73aeab3002a7cc00aa4ab2571ca44e87d036dd06781874fb3831a0df8920f11651fb681f3cd7dd7282499f017f73b22af4b424635c
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UsP:bAvJCYOOvbRPDEgXrNekd7l94i3py/yD
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_8c065bac60051cc55eeaf2be8aaa99b0_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-02_8c065bac60051cc55eeaf2be8aaa99b0_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-02_8c065bac60051cc55eeaf2be8aaa99b0_cryptolocker
-
Size
38KB
-
MD5
8c065bac60051cc55eeaf2be8aaa99b0
-
SHA1
a36aa541789aef871cf3e7815ccda9ec590a88b5
-
SHA256
7bb96cfa51e4fb20481863968321a2a22904c98213c6c779fc2e0478cbb57c5f
-
SHA512
d666b1893c74d548275a2f73aeab3002a7cc00aa4ab2571ca44e87d036dd06781874fb3831a0df8920f11651fb681f3cd7dd7282499f017f73b22af4b424635c
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UsP:bAvJCYOOvbRPDEgXrNekd7l94i3py/yD
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-