General
-
Target
2024-02-20_26ce6ebbf4398334517eeebb88dd916f_cryptolocker
-
Size
45KB
-
Sample
240220-kay9hsdf9v
-
MD5
26ce6ebbf4398334517eeebb88dd916f
-
SHA1
c5f2a28bf3fad171585a967ac5ac9b67c9106b9b
-
SHA256
0cb3e95eca1e61c8179cc816c34792fd851320ef160d050dd19d2e1684a72b6c
-
SHA512
67775eb57cb8456ae17467ec4ba3413db385f8296046e98e9aa731ebab496a7650bc339afd16028793c71d172d92559604308a08a8ccf6949649e3608086ab4a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YlNobNQ:bgGYcA/53GAA6y37Qeb2
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_26ce6ebbf4398334517eeebb88dd916f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-20_26ce6ebbf4398334517eeebb88dd916f_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-20_26ce6ebbf4398334517eeebb88dd916f_cryptolocker
-
Size
45KB
-
MD5
26ce6ebbf4398334517eeebb88dd916f
-
SHA1
c5f2a28bf3fad171585a967ac5ac9b67c9106b9b
-
SHA256
0cb3e95eca1e61c8179cc816c34792fd851320ef160d050dd19d2e1684a72b6c
-
SHA512
67775eb57cb8456ae17467ec4ba3413db385f8296046e98e9aa731ebab496a7650bc339afd16028793c71d172d92559604308a08a8ccf6949649e3608086ab4a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YlNobNQ:bgGYcA/53GAA6y37Qeb2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-