General
-
Target
2024-02-13_ae1c81164b7e07bc40e5f5cca2bfd1e7_cryptolocker
-
Size
60KB
-
Sample
240213-gpwkdshh7w
-
MD5
ae1c81164b7e07bc40e5f5cca2bfd1e7
-
SHA1
629c1156c1d578278a2d27500e4dcd96fec2ae3a
-
SHA256
d55947331136272568e066b4a0f1179042bae8fe53ba8f641bb6e66f69c31d53
-
SHA512
940686201a967dae78ab205604416dd4f67125ed9f9d36dc0b52574a80abf32459c69b3da9feeca0a76a7860d7274f8b482134a6b4b55f14d6f3122e4354c5f6
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHNJ:btng54SMLr+/AO/kIhfoKMHdO
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_ae1c81164b7e07bc40e5f5cca2bfd1e7_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_ae1c81164b7e07bc40e5f5cca2bfd1e7_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_ae1c81164b7e07bc40e5f5cca2bfd1e7_cryptolocker
-
Size
60KB
-
MD5
ae1c81164b7e07bc40e5f5cca2bfd1e7
-
SHA1
629c1156c1d578278a2d27500e4dcd96fec2ae3a
-
SHA256
d55947331136272568e066b4a0f1179042bae8fe53ba8f641bb6e66f69c31d53
-
SHA512
940686201a967dae78ab205604416dd4f67125ed9f9d36dc0b52574a80abf32459c69b3da9feeca0a76a7860d7274f8b482134a6b4b55f14d6f3122e4354c5f6
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHNJ:btng54SMLr+/AO/kIhfoKMHdO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-