General
-
Target
2024-02-13_45c967cb85e79e4902d7a01afdafffb7_cryptolocker
-
Size
34KB
-
Sample
240213-jgmcvsea45
-
MD5
45c967cb85e79e4902d7a01afdafffb7
-
SHA1
85a314576c22418278fef3b3fb6f536567ae5573
-
SHA256
942b8fee45a4840592c14b99c6283f1dd89f86fddb3990d58e1b2c49ed0d8b44
-
SHA512
13eed828fca40c8173f4c9d594a5883684c7fbc810643c66b771d9cba24b72c917ef66e3458c5fe3312e4dfdf9b038c934c393dd80f562bd4f19d42ed3b7bc50
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLg8W:bA74zYcgT/Ekd0ryfj86U8zbx
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_45c967cb85e79e4902d7a01afdafffb7_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_45c967cb85e79e4902d7a01afdafffb7_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-13_45c967cb85e79e4902d7a01afdafffb7_cryptolocker
-
Size
34KB
-
MD5
45c967cb85e79e4902d7a01afdafffb7
-
SHA1
85a314576c22418278fef3b3fb6f536567ae5573
-
SHA256
942b8fee45a4840592c14b99c6283f1dd89f86fddb3990d58e1b2c49ed0d8b44
-
SHA512
13eed828fca40c8173f4c9d594a5883684c7fbc810643c66b771d9cba24b72c917ef66e3458c5fe3312e4dfdf9b038c934c393dd80f562bd4f19d42ed3b7bc50
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLg8W:bA74zYcgT/Ekd0ryfj86U8zbx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-