General
-
Target
2024-02-14_6a15fea1d893e02300eb52216858415b_cryptolocker
-
Size
29KB
-
Sample
240214-edvgvagb8y
-
MD5
6a15fea1d893e02300eb52216858415b
-
SHA1
c743ed485918e4ae7c33b07713fcb6575ce64ae0
-
SHA256
49f7360dc9c92aaff836ed6b0f8cc9ebc86c7427ca30579b07cec094e94b688d
-
SHA512
5454d2954f0297faad7441c992174be1b390d3a405869e8e2f24044bb2bddd49333c807dfc150de5292c1a1f5ed9e4917b2bf00410ed361f012849738b96ea3f
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5S+z6:bA74zYcgT/Ekd0ryfjQRSnrG
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_6a15fea1d893e02300eb52216858415b_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_6a15fea1d893e02300eb52216858415b_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-14_6a15fea1d893e02300eb52216858415b_cryptolocker
-
Size
29KB
-
MD5
6a15fea1d893e02300eb52216858415b
-
SHA1
c743ed485918e4ae7c33b07713fcb6575ce64ae0
-
SHA256
49f7360dc9c92aaff836ed6b0f8cc9ebc86c7427ca30579b07cec094e94b688d
-
SHA512
5454d2954f0297faad7441c992174be1b390d3a405869e8e2f24044bb2bddd49333c807dfc150de5292c1a1f5ed9e4917b2bf00410ed361f012849738b96ea3f
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5S+z6:bA74zYcgT/Ekd0ryfjQRSnrG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-