General
-
Target
2024-02-12_7ff07bd79437190f60e27d157b5812ec_cryptolocker
-
Size
31KB
-
Sample
240212-ytrwfabd7z
-
MD5
7ff07bd79437190f60e27d157b5812ec
-
SHA1
40ecce7fd3fee479ad07a67a2102366354a2936f
-
SHA256
539866a5e63c1e60778e27aee28f53687f6749599357ade2e845ecce2d58fb99
-
SHA512
beec26f401a892acf0951b691948cb317781627f8a7b2a8584861bbff19d8585df78053ac49a18f31e1b684b0ed6843f96d5977bd46b9bf663536dcbacbe0552
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/Bud:b7o/2n1TCraU6GD1a4Xt9a
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_7ff07bd79437190f60e27d157b5812ec_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_7ff07bd79437190f60e27d157b5812ec_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_7ff07bd79437190f60e27d157b5812ec_cryptolocker
-
Size
31KB
-
MD5
7ff07bd79437190f60e27d157b5812ec
-
SHA1
40ecce7fd3fee479ad07a67a2102366354a2936f
-
SHA256
539866a5e63c1e60778e27aee28f53687f6749599357ade2e845ecce2d58fb99
-
SHA512
beec26f401a892acf0951b691948cb317781627f8a7b2a8584861bbff19d8585df78053ac49a18f31e1b684b0ed6843f96d5977bd46b9bf663536dcbacbe0552
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/Bud:b7o/2n1TCraU6GD1a4Xt9a
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-