General
-
Target
2024-02-21_715dd5b148c498f76a87cf24e348248e_cryptolocker
-
Size
37KB
-
Sample
240221-q1771agg94
-
MD5
715dd5b148c498f76a87cf24e348248e
-
SHA1
17cb90779534e3425f7032d7bda86e8f4c676ede
-
SHA256
3df654380e3da647638dfe4f9a22c037a2349b6253355a477f985ca881ee38e2
-
SHA512
4e53d76dd3f6f076117bd44a55d937ad4c4889928aa042b2379c629c6372cf7b9eadcae77878e1263a77c632e3b8d65b3160af7acebdb2c84d6d62a86ab906ed
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3OJ:bxNrC7kYo1Fxf3s06gYJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_715dd5b148c498f76a87cf24e348248e_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-21_715dd5b148c498f76a87cf24e348248e_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_715dd5b148c498f76a87cf24e348248e_cryptolocker
-
Size
37KB
-
MD5
715dd5b148c498f76a87cf24e348248e
-
SHA1
17cb90779534e3425f7032d7bda86e8f4c676ede
-
SHA256
3df654380e3da647638dfe4f9a22c037a2349b6253355a477f985ca881ee38e2
-
SHA512
4e53d76dd3f6f076117bd44a55d937ad4c4889928aa042b2379c629c6372cf7b9eadcae77878e1263a77c632e3b8d65b3160af7acebdb2c84d6d62a86ab906ed
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3OJ:bxNrC7kYo1Fxf3s06gYJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-