General
-
Target
2024-02-19_d421edf02f4b087221daa6abe9dae3e8_cryptolocker
-
Size
40KB
-
Sample
240219-yn88jacf53
-
MD5
d421edf02f4b087221daa6abe9dae3e8
-
SHA1
77deacbab21ba188466638a078cc10ac37a8c560
-
SHA256
cedf411c8ff22328ec2d0a38a63fc49bbbe4f17b056bef49a3fe083deb893af8
-
SHA512
69da9f2a52aad52bc877cec87047cd882a6060b63a5182986e2f006bb54831709d399a8ab474c2c78a8a6db1448d7bf879db57afd59d4c87fe882da300cd3ed3
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vrBjnFP:bgGYcA/53GADw8ClrcnFP
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_d421edf02f4b087221daa6abe9dae3e8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_d421edf02f4b087221daa6abe9dae3e8_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_d421edf02f4b087221daa6abe9dae3e8_cryptolocker
-
Size
40KB
-
MD5
d421edf02f4b087221daa6abe9dae3e8
-
SHA1
77deacbab21ba188466638a078cc10ac37a8c560
-
SHA256
cedf411c8ff22328ec2d0a38a63fc49bbbe4f17b056bef49a3fe083deb893af8
-
SHA512
69da9f2a52aad52bc877cec87047cd882a6060b63a5182986e2f006bb54831709d399a8ab474c2c78a8a6db1448d7bf879db57afd59d4c87fe882da300cd3ed3
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vrBjnFP:bgGYcA/53GADw8ClrcnFP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-