General
-
Target
2024-02-17_b5eaa18c2d54c99466e1080702ff13ca_cryptolocker
-
Size
37KB
-
Sample
240217-ghde8scd43
-
MD5
b5eaa18c2d54c99466e1080702ff13ca
-
SHA1
75901d50309cd261660a5be043cf4d09841f6122
-
SHA256
2679162b2060ba6776c9dc28908e1afaa874b246e82a2f55dfd63a42d6f14566
-
SHA512
3406ceb8edc6b4d4b8a234c00d41430451f91c08c067208f3529b2f5df573812f6b1047fa56697c15199783c8798bdfb01dcdeebcbe05f89b40d879e16f20d1a
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxuY:b/yC4GyNM01GuQMNXw2PSjHPbSuYlt
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_b5eaa18c2d54c99466e1080702ff13ca_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_b5eaa18c2d54c99466e1080702ff13ca_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_b5eaa18c2d54c99466e1080702ff13ca_cryptolocker
-
Size
37KB
-
MD5
b5eaa18c2d54c99466e1080702ff13ca
-
SHA1
75901d50309cd261660a5be043cf4d09841f6122
-
SHA256
2679162b2060ba6776c9dc28908e1afaa874b246e82a2f55dfd63a42d6f14566
-
SHA512
3406ceb8edc6b4d4b8a234c00d41430451f91c08c067208f3529b2f5df573812f6b1047fa56697c15199783c8798bdfb01dcdeebcbe05f89b40d879e16f20d1a
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlxuY:b/yC4GyNM01GuQMNXw2PSjHPbSuYlt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-