General
-
Target
2024-02-13_30a963bb40c2398d9741bc22f31ddb9b_cryptolocker
-
Size
40KB
-
Sample
240213-jc2xracd51
-
MD5
30a963bb40c2398d9741bc22f31ddb9b
-
SHA1
5d171e1e14921ad46c1321cd3dc54d0581fe086c
-
SHA256
98be5d27a2aac005f8ecb9dcc8b807ddde698481ef3fc76f81a07bc093db69ce
-
SHA512
d3353a8c986dea4166b23e690063304d8b67544dc1c05a242d040189f0f8b406abdb9e0dc2732648f377082d48bfaeef952c3c6c5926e27e6c5eecf3801afe37
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKG:bIDOw9a0Dwo3P1ojvUSDho
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_30a963bb40c2398d9741bc22f31ddb9b_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_30a963bb40c2398d9741bc22f31ddb9b_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_30a963bb40c2398d9741bc22f31ddb9b_cryptolocker
-
Size
40KB
-
MD5
30a963bb40c2398d9741bc22f31ddb9b
-
SHA1
5d171e1e14921ad46c1321cd3dc54d0581fe086c
-
SHA256
98be5d27a2aac005f8ecb9dcc8b807ddde698481ef3fc76f81a07bc093db69ce
-
SHA512
d3353a8c986dea4166b23e690063304d8b67544dc1c05a242d040189f0f8b406abdb9e0dc2732648f377082d48bfaeef952c3c6c5926e27e6c5eecf3801afe37
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKG:bIDOw9a0Dwo3P1ojvUSDho
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-