General
-
Target
2024-02-12_867acf385aeb34aba0d670e67a65f381_cryptolocker
-
Size
46KB
-
Sample
240212-yt7xnadb33
-
MD5
867acf385aeb34aba0d670e67a65f381
-
SHA1
a910f804a164a685c1e8392abc6f26d431fb9241
-
SHA256
335d6f9e6c6996d18b11510807c965803f1486a93920532c147068cdb026c005
-
SHA512
22d185a3024ba90a4225101143597e7ff6e9d44ef3eac5f18d3ceac8fc5c08b1610d784e93c68067cf009f1488ab552e479f2158251fb8d85785917406198189
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIDN:bgGYcA/53GAA6y37Q6dIh
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_867acf385aeb34aba0d670e67a65f381_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_867acf385aeb34aba0d670e67a65f381_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-12_867acf385aeb34aba0d670e67a65f381_cryptolocker
-
Size
46KB
-
MD5
867acf385aeb34aba0d670e67a65f381
-
SHA1
a910f804a164a685c1e8392abc6f26d431fb9241
-
SHA256
335d6f9e6c6996d18b11510807c965803f1486a93920532c147068cdb026c005
-
SHA512
22d185a3024ba90a4225101143597e7ff6e9d44ef3eac5f18d3ceac8fc5c08b1610d784e93c68067cf009f1488ab552e479f2158251fb8d85785917406198189
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIDN:bgGYcA/53GAA6y37Q6dIh
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-