General
-
Target
2024-02-19_23c8c3dd816f54440429adb8aefd6a26_cryptolocker
-
Size
36KB
-
Sample
240219-btaktsgd7y
-
MD5
23c8c3dd816f54440429adb8aefd6a26
-
SHA1
58a51465577254f1b3a6cbf69b3e84cabf7e3000
-
SHA256
11d5fa7180973d35b4409542730a422eac29c217c84c840ca53f188cdeb4a82f
-
SHA512
3d137a1a73bf19ceefb7745d33f1d1014a9919f1261e74bdefd727f5cca6dc54030822f9794be2d346a8c74e32c145666be2ece485a5f9471093cbb8f64a8a7e
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2BodcAOjbQ36ttTf:btB9g/WItCSsAGjX7r3BGubl
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_23c8c3dd816f54440429adb8aefd6a26_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_23c8c3dd816f54440429adb8aefd6a26_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-19_23c8c3dd816f54440429adb8aefd6a26_cryptolocker
-
Size
36KB
-
MD5
23c8c3dd816f54440429adb8aefd6a26
-
SHA1
58a51465577254f1b3a6cbf69b3e84cabf7e3000
-
SHA256
11d5fa7180973d35b4409542730a422eac29c217c84c840ca53f188cdeb4a82f
-
SHA512
3d137a1a73bf19ceefb7745d33f1d1014a9919f1261e74bdefd727f5cca6dc54030822f9794be2d346a8c74e32c145666be2ece485a5f9471093cbb8f64a8a7e
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2BodcAOjbQ36ttTf:btB9g/WItCSsAGjX7r3BGubl
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-