General
-
Target
2024-02-13_38525e60b60fbd1cdaa46df67763e338_cryptolocker
-
Size
33KB
-
Sample
240213-v6h8aafb88
-
MD5
38525e60b60fbd1cdaa46df67763e338
-
SHA1
f6ab7e1d3fbe90cfc2e54be789bb20ff718d61a6
-
SHA256
f51f3587cd163406aee14ed1e6f1a33e5e452963dbfbf2c0ee35a4cf874ef53d
-
SHA512
2f998a19a7bec80c4d1bc454ec6255d6fc795bb4e95d261b436fd0d31bc245b07f77b4349f3f667fb2e12d9e2aac132ae8a7860cfe986f51ab76c578bb37a8b0
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SE90:bA74zYcgT/Ekd0ryfjQRSNhpSV
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_38525e60b60fbd1cdaa46df67763e338_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-13_38525e60b60fbd1cdaa46df67763e338_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-13_38525e60b60fbd1cdaa46df67763e338_cryptolocker
-
Size
33KB
-
MD5
38525e60b60fbd1cdaa46df67763e338
-
SHA1
f6ab7e1d3fbe90cfc2e54be789bb20ff718d61a6
-
SHA256
f51f3587cd163406aee14ed1e6f1a33e5e452963dbfbf2c0ee35a4cf874ef53d
-
SHA512
2f998a19a7bec80c4d1bc454ec6255d6fc795bb4e95d261b436fd0d31bc245b07f77b4349f3f667fb2e12d9e2aac132ae8a7860cfe986f51ab76c578bb37a8b0
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SE90:bA74zYcgT/Ekd0ryfjQRSNhpSV
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-