General
-
Target
2024-02-18_ecb92fbe76dbe69362cc722483823b13_cryptolocker
-
Size
41KB
-
Sample
240218-vcsvmacd51
-
MD5
ecb92fbe76dbe69362cc722483823b13
-
SHA1
f43513d6eb342855bb69bcd16855f348b72dc537
-
SHA256
5193d2db63a22cfe309e94260169f70f920df0ac9d3aeccc46447816ffdcabc7
-
SHA512
b9d1bbd64163ccec2f19031fa505d49ef69a0a66a0e3c0410fba504b072b99665a8c648b02f97d7729dc152709658e6463c09b8f71154ccab68e61538a8dc2bd
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAaW:b/pYayGig5HjS3NPA1
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_ecb92fbe76dbe69362cc722483823b13_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_ecb92fbe76dbe69362cc722483823b13_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-18_ecb92fbe76dbe69362cc722483823b13_cryptolocker
-
Size
41KB
-
MD5
ecb92fbe76dbe69362cc722483823b13
-
SHA1
f43513d6eb342855bb69bcd16855f348b72dc537
-
SHA256
5193d2db63a22cfe309e94260169f70f920df0ac9d3aeccc46447816ffdcabc7
-
SHA512
b9d1bbd64163ccec2f19031fa505d49ef69a0a66a0e3c0410fba504b072b99665a8c648b02f97d7729dc152709658e6463c09b8f71154ccab68e61538a8dc2bd
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAaW:b/pYayGig5HjS3NPA1
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-