General
-
Target
2024-02-12_f7833b4b99ecec4f3d2c28b81f84da8a_cryptolocker
-
Size
39KB
-
Sample
240212-wjk9sscd82
-
MD5
f7833b4b99ecec4f3d2c28b81f84da8a
-
SHA1
1aa8b83c91d010433bb153b5badd6b91994b66c8
-
SHA256
65d27d0b48fd232adc30a7d6256b91460bc2cb41a6e3e15995a44524915369c7
-
SHA512
6faef108bec257efc12074a944c4d3e286967d1d8be5b2ebe69bf49adabed45dc821142628bdc4a966ad817663af746de59f698d7b12886abae7363568340c6b
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlWjb:b/yC4GyNM01GuQMNXw2PSjHPbSuYlWv
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_f7833b4b99ecec4f3d2c28b81f84da8a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_f7833b4b99ecec4f3d2c28b81f84da8a_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_f7833b4b99ecec4f3d2c28b81f84da8a_cryptolocker
-
Size
39KB
-
MD5
f7833b4b99ecec4f3d2c28b81f84da8a
-
SHA1
1aa8b83c91d010433bb153b5badd6b91994b66c8
-
SHA256
65d27d0b48fd232adc30a7d6256b91460bc2cb41a6e3e15995a44524915369c7
-
SHA512
6faef108bec257efc12074a944c4d3e286967d1d8be5b2ebe69bf49adabed45dc821142628bdc4a966ad817663af746de59f698d7b12886abae7363568340c6b
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlWjb:b/yC4GyNM01GuQMNXw2PSjHPbSuYlWv
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-