General
-
Target
2024-02-19_86ed39b78e1e0dd5aa59426b3ab0830c_cryptolocker
-
Size
385KB
-
Sample
240219-t6ttcagh85
-
MD5
86ed39b78e1e0dd5aa59426b3ab0830c
-
SHA1
079493b69239b69e2b5459b402e737df546a04f2
-
SHA256
a21472cef2468b505b2eb0b7011b2f4e96aa3e13b5ecea99acf5c01bb48e371c
-
SHA512
2e28cf18f3239a7c859091fef3989c2f9b159898a22f276dc6a30da76a3175716a1e2e204c52e618bf7619a484493b61adf4526dd1b145e61a30c00431eb9231
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXh:nnOflT/ZFIjBz3xjTxynGUOUhXh
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_86ed39b78e1e0dd5aa59426b3ab0830c_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-19_86ed39b78e1e0dd5aa59426b3ab0830c_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_86ed39b78e1e0dd5aa59426b3ab0830c_cryptolocker
-
Size
385KB
-
MD5
86ed39b78e1e0dd5aa59426b3ab0830c
-
SHA1
079493b69239b69e2b5459b402e737df546a04f2
-
SHA256
a21472cef2468b505b2eb0b7011b2f4e96aa3e13b5ecea99acf5c01bb48e371c
-
SHA512
2e28cf18f3239a7c859091fef3989c2f9b159898a22f276dc6a30da76a3175716a1e2e204c52e618bf7619a484493b61adf4526dd1b145e61a30c00431eb9231
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXh:nnOflT/ZFIjBz3xjTxynGUOUhXh
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-