General
-
Target
2024-02-20_5a1f9217c8db7d478b67b7444acc395c_cryptolocker
-
Size
53KB
-
Sample
240220-fdcsgabg79
-
MD5
5a1f9217c8db7d478b67b7444acc395c
-
SHA1
d58620c2dd99d31ee59c09769b05fb89ea02a243
-
SHA256
4f477e01396ebc06f01c941b28045fd7ccdbf90e3429da84b87251ea71f91f41
-
SHA512
5509992edde582f0aa2d51126116049fb602b31b03ac6f149b59289840c4821b7dbd5f88dcebe047a1a5a09b4d4e7dc4c93af0c597263b02551a5c152784730e
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTBw:bIDOw9a0DwitDZzcTX
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_5a1f9217c8db7d478b67b7444acc395c_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_5a1f9217c8db7d478b67b7444acc395c_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-20_5a1f9217c8db7d478b67b7444acc395c_cryptolocker
-
Size
53KB
-
MD5
5a1f9217c8db7d478b67b7444acc395c
-
SHA1
d58620c2dd99d31ee59c09769b05fb89ea02a243
-
SHA256
4f477e01396ebc06f01c941b28045fd7ccdbf90e3429da84b87251ea71f91f41
-
SHA512
5509992edde582f0aa2d51126116049fb602b31b03ac6f149b59289840c4821b7dbd5f88dcebe047a1a5a09b4d4e7dc4c93af0c597263b02551a5c152784730e
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTBw:bIDOw9a0DwitDZzcTX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-