General
-
Target
2024-02-19_95efa7d3bbc16d274bb682aeed646687_cryptolocker
-
Size
40KB
-
Sample
240219-ecqr9shc9y
-
MD5
95efa7d3bbc16d274bb682aeed646687
-
SHA1
74981996e23653989e97b0bd8e532205c86f1c2c
-
SHA256
989659a6ef29d2997b22f5f03801a59ce42bf68f0b8484bcd8a454e67072cf4d
-
SHA512
5f5d91b9915c9cf3d9a797d34f7cbb13c22d02e155612e266ac35d99a6d8cd87b53b5ff6d3135b31e50c5d283a351302ba870486e349d14bed40793d11d76fe9
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vrBjnFo:bgGYcA/53GADw8ClrcnFo
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_95efa7d3bbc16d274bb682aeed646687_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_95efa7d3bbc16d274bb682aeed646687_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_95efa7d3bbc16d274bb682aeed646687_cryptolocker
-
Size
40KB
-
MD5
95efa7d3bbc16d274bb682aeed646687
-
SHA1
74981996e23653989e97b0bd8e532205c86f1c2c
-
SHA256
989659a6ef29d2997b22f5f03801a59ce42bf68f0b8484bcd8a454e67072cf4d
-
SHA512
5f5d91b9915c9cf3d9a797d34f7cbb13c22d02e155612e266ac35d99a6d8cd87b53b5ff6d3135b31e50c5d283a351302ba870486e349d14bed40793d11d76fe9
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vrBjnFo:bgGYcA/53GADw8ClrcnFo
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-