General
-
Target
2024-02-19_85f149ceccbb32446d41875db4652d30_cryptolocker
-
Size
40KB
-
Sample
240219-t6md9sgd3s
-
MD5
85f149ceccbb32446d41875db4652d30
-
SHA1
341c9e4e976e7442a56be1029cf5aab566e77e92
-
SHA256
14e58d2e7f8608016029d92e7fff6ec542c28c640119072d26d208d078324b0e
-
SHA512
8b8d0403636df3b9cd7fe7bfc9f22b54e5f0ca1b79c0a60a6cf31c115064c35aafdae1143b7adb6666ee9eed0dae4d4eb6e8c350cf97c7b47dbe414a21bb9d2a
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA9Dm:b/pYayGig5HjS3NPA9Dm
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_85f149ceccbb32446d41875db4652d30_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_85f149ceccbb32446d41875db4652d30_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_85f149ceccbb32446d41875db4652d30_cryptolocker
-
Size
40KB
-
MD5
85f149ceccbb32446d41875db4652d30
-
SHA1
341c9e4e976e7442a56be1029cf5aab566e77e92
-
SHA256
14e58d2e7f8608016029d92e7fff6ec542c28c640119072d26d208d078324b0e
-
SHA512
8b8d0403636df3b9cd7fe7bfc9f22b54e5f0ca1b79c0a60a6cf31c115064c35aafdae1143b7adb6666ee9eed0dae4d4eb6e8c350cf97c7b47dbe414a21bb9d2a
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PA9Dm:b/pYayGig5HjS3NPA9Dm
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-