General
-
Target
2024-02-20_6516d3ea5594d89ea0ecabf5445a2236_cryptolocker
-
Size
33KB
-
Sample
240220-fe9htsbh29
-
MD5
6516d3ea5594d89ea0ecabf5445a2236
-
SHA1
ba7b59f45d519c3c9607eb4ca616546983879723
-
SHA256
a48bc971a2ad77506b7b8112ede162409e7cc5548d112dd9fdea5ba1a87511b0
-
SHA512
3fa38f43b4bf9e5dd282ee5fdeebe3490b5437a48e0687fbbd3e64c7c366c3b8ebed7f5ff08d3aeb77da5a809adc06a7fd85a254fc5751a516bd22a0b3011324
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlz5Kg1GwB:bA74zYcgT/Ekd0ryfjPIunYHKO
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_6516d3ea5594d89ea0ecabf5445a2236_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_6516d3ea5594d89ea0ecabf5445a2236_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-20_6516d3ea5594d89ea0ecabf5445a2236_cryptolocker
-
Size
33KB
-
MD5
6516d3ea5594d89ea0ecabf5445a2236
-
SHA1
ba7b59f45d519c3c9607eb4ca616546983879723
-
SHA256
a48bc971a2ad77506b7b8112ede162409e7cc5548d112dd9fdea5ba1a87511b0
-
SHA512
3fa38f43b4bf9e5dd282ee5fdeebe3490b5437a48e0687fbbd3e64c7c366c3b8ebed7f5ff08d3aeb77da5a809adc06a7fd85a254fc5751a516bd22a0b3011324
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlz5Kg1GwB:bA74zYcgT/Ekd0ryfjPIunYHKO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-