General
-
Target
2024-02-18_0a168fdd9ddd32b44464e504f9658269_cryptolocker
-
Size
53KB
-
Sample
240218-pk1mjshh31
-
MD5
0a168fdd9ddd32b44464e504f9658269
-
SHA1
2fe998a287ee68899895814e889f53580516d5e7
-
SHA256
2c446cd16476eb13f48107361897393e7aa50387ec39c0d9f48a85257a0a867d
-
SHA512
3c90556d7128bec8d730dd9f6fa98ef47ed2bc468c02d327faf0ba64df74f2fff1eb04eea4ea76dd39d26d53a89e372b67d0cae5778c870405be4995a648f180
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8I:bIDOw9a0DwitDZzcTJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_0a168fdd9ddd32b44464e504f9658269_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_0a168fdd9ddd32b44464e504f9658269_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-18_0a168fdd9ddd32b44464e504f9658269_cryptolocker
-
Size
53KB
-
MD5
0a168fdd9ddd32b44464e504f9658269
-
SHA1
2fe998a287ee68899895814e889f53580516d5e7
-
SHA256
2c446cd16476eb13f48107361897393e7aa50387ec39c0d9f48a85257a0a867d
-
SHA512
3c90556d7128bec8d730dd9f6fa98ef47ed2bc468c02d327faf0ba64df74f2fff1eb04eea4ea76dd39d26d53a89e372b67d0cae5778c870405be4995a648f180
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTb8I:bIDOw9a0DwitDZzcTJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-