General
-
Target
2024-02-03_139db184c30ae8e55e9db0a287ffd57e_cryptolocker
-
Size
41KB
-
Sample
240203-b6jn9sgeal
-
MD5
139db184c30ae8e55e9db0a287ffd57e
-
SHA1
25aea5d48ad292a380d445e1e8fb4697cd9ee1bf
-
SHA256
4f6d06e1043f2be3f1b44341974beff80e9e738aa107e6aa166675ba9873d029
-
SHA512
6135ecd3857bc4a218fe13205a7cee8433a5ad47fe155da0ba0ed91e629f15811a0f24c77b7756381dcaa5369926a134c570a39b2c0c6f0cd63598248291fdd7
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqU:bxNrC7kYo1Fxf3s05rwxbFd
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_139db184c30ae8e55e9db0a287ffd57e_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_139db184c30ae8e55e9db0a287ffd57e_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-03_139db184c30ae8e55e9db0a287ffd57e_cryptolocker
-
Size
41KB
-
MD5
139db184c30ae8e55e9db0a287ffd57e
-
SHA1
25aea5d48ad292a380d445e1e8fb4697cd9ee1bf
-
SHA256
4f6d06e1043f2be3f1b44341974beff80e9e738aa107e6aa166675ba9873d029
-
SHA512
6135ecd3857bc4a218fe13205a7cee8433a5ad47fe155da0ba0ed91e629f15811a0f24c77b7756381dcaa5369926a134c570a39b2c0c6f0cd63598248291fdd7
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqU:bxNrC7kYo1Fxf3s05rwxbFd
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-