General
-
Target
2024-02-13_8540abb9a040a0a74b083e081b72f7d6_cryptolocker
-
Size
32KB
-
Sample
240213-js3h8aed22
-
MD5
8540abb9a040a0a74b083e081b72f7d6
-
SHA1
6296ecb5df9734f1c3575b7387802022ea659519
-
SHA256
522b7d5cf67e7f8994118c269c035b35d7d2cb4d2ce95d135be7c149776ed7d9
-
SHA512
c24dd1b0e26ac7bb1bb5a1c0d38e95f8da7ebf7e3d4eca8ff23e7a4703a19cd4577173bb7cb7606c4204e2708ab0304e3be1b158a2158b554c371e95cdc13bea
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qbSL:b7o/2n1TCraU6GD1a4Xt9bRU62L
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_8540abb9a040a0a74b083e081b72f7d6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_8540abb9a040a0a74b083e081b72f7d6_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-13_8540abb9a040a0a74b083e081b72f7d6_cryptolocker
-
Size
32KB
-
MD5
8540abb9a040a0a74b083e081b72f7d6
-
SHA1
6296ecb5df9734f1c3575b7387802022ea659519
-
SHA256
522b7d5cf67e7f8994118c269c035b35d7d2cb4d2ce95d135be7c149776ed7d9
-
SHA512
c24dd1b0e26ac7bb1bb5a1c0d38e95f8da7ebf7e3d4eca8ff23e7a4703a19cd4577173bb7cb7606c4204e2708ab0304e3be1b158a2158b554c371e95cdc13bea
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qbSL:b7o/2n1TCraU6GD1a4Xt9bRU62L
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-