General
-
Target
2024-02-20_a46951693e02dba3fd4b848cae296ad6_cryptolocker
-
Size
33KB
-
Sample
240220-r9be3aae73
-
MD5
a46951693e02dba3fd4b848cae296ad6
-
SHA1
44a3b8445b535893635454c4125b36a35aaa268c
-
SHA256
c7c8572765d05b252731779838264b64d48a456e023b7aba5c09e036094b1dc4
-
SHA512
ad5115f7203db6169f5bdea9aece544c0378a1d99e697a9fced247c49b14a8b4de7c0e29a12f33dbe1182302fd3d2eb9e28de97667a7d62f7fe761ed33b5af9a
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SEli:bA74zYcgT/Ekd0ryfjQRSNhpSEi
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_a46951693e02dba3fd4b848cae296ad6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_a46951693e02dba3fd4b848cae296ad6_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-20_a46951693e02dba3fd4b848cae296ad6_cryptolocker
-
Size
33KB
-
MD5
a46951693e02dba3fd4b848cae296ad6
-
SHA1
44a3b8445b535893635454c4125b36a35aaa268c
-
SHA256
c7c8572765d05b252731779838264b64d48a456e023b7aba5c09e036094b1dc4
-
SHA512
ad5115f7203db6169f5bdea9aece544c0378a1d99e697a9fced247c49b14a8b4de7c0e29a12f33dbe1182302fd3d2eb9e28de97667a7d62f7fe761ed33b5af9a
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SEli:bA74zYcgT/Ekd0ryfjQRSNhpSEi
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-