General
-
Target
2024-02-12_fba70ce59d790880a26714bcbe43bbe4_cryptolocker
-
Size
34KB
-
Sample
240212-rea6tafe6v
-
MD5
fba70ce59d790880a26714bcbe43bbe4
-
SHA1
aa756201012668ace3d82f2b0bd0941006be7592
-
SHA256
76a3bbfba0469631fbf21b79d6349268083addd4710edd570807312049a9642f
-
SHA512
cb5edc3e564eb109db78f7e2fec15d5106c8b0c2961ed12f75cb5640759cae9009824e8cb176ca10242fafc7596236d158804803c7c83fd9296bb0d7e11a747f
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0f9HMn0s:btB9g/WItCSsAGjX7e9N8sP
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_fba70ce59d790880a26714bcbe43bbe4_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_fba70ce59d790880a26714bcbe43bbe4_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_fba70ce59d790880a26714bcbe43bbe4_cryptolocker
-
Size
34KB
-
MD5
fba70ce59d790880a26714bcbe43bbe4
-
SHA1
aa756201012668ace3d82f2b0bd0941006be7592
-
SHA256
76a3bbfba0469631fbf21b79d6349268083addd4710edd570807312049a9642f
-
SHA512
cb5edc3e564eb109db78f7e2fec15d5106c8b0c2961ed12f75cb5640759cae9009824e8cb176ca10242fafc7596236d158804803c7c83fd9296bb0d7e11a747f
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0f9HMn0s:btB9g/WItCSsAGjX7e9N8sP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-