General
-
Target
2024-02-12_efcc0940fad0ac891b059925fff37baf_cryptolocker
-
Size
35KB
-
Sample
240212-yryafabd51
-
MD5
efcc0940fad0ac891b059925fff37baf
-
SHA1
bbfe8720e5b7c69e6af302068a8e8440e70990a8
-
SHA256
4ee383a1a7269175b9c469362cd7a1152c0d7603a5b387b285e5065ea8e43ae2
-
SHA512
e48a6a68ecccebe1b9dfeac861becf354f1135619989715702b963002ff13b59112e46fe941fdc9f689f6c7f7fa889642eea27834411db0c7f11d48a5f2326ca
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3H4:bA6YcA/X6G0W143Y
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_efcc0940fad0ac891b059925fff37baf_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_efcc0940fad0ac891b059925fff37baf_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_efcc0940fad0ac891b059925fff37baf_cryptolocker
-
Size
35KB
-
MD5
efcc0940fad0ac891b059925fff37baf
-
SHA1
bbfe8720e5b7c69e6af302068a8e8440e70990a8
-
SHA256
4ee383a1a7269175b9c469362cd7a1152c0d7603a5b387b285e5065ea8e43ae2
-
SHA512
e48a6a68ecccebe1b9dfeac861becf354f1135619989715702b963002ff13b59112e46fe941fdc9f689f6c7f7fa889642eea27834411db0c7f11d48a5f2326ca
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3H4:bA6YcA/X6G0W143Y
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-