General
-
Target
2024-02-21_0872c8134848d3cd471c591cf2161a49_cryptolocker
-
Size
46KB
-
Sample
240221-x33hvsdh3v
-
MD5
0872c8134848d3cd471c591cf2161a49
-
SHA1
7102d120a647a81784335bd2ca6d480538ce14c8
-
SHA256
d10fedf908f6cb992dd9d50c22b2b335be4caa50215796b8aa65c3f321d3de57
-
SHA512
405dc8fc5f13d0163f866a84da999f1f0db9242dc2b30e2876da4ae96aa70b0f7b30a5fc3075219e1f16fdb451e1fd1cc68aff64069548803481127e111baef9
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ElwC:bgGYcA/53GAA6y37Q68wC
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_0872c8134848d3cd471c591cf2161a49_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_0872c8134848d3cd471c591cf2161a49_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_0872c8134848d3cd471c591cf2161a49_cryptolocker
-
Size
46KB
-
MD5
0872c8134848d3cd471c591cf2161a49
-
SHA1
7102d120a647a81784335bd2ca6d480538ce14c8
-
SHA256
d10fedf908f6cb992dd9d50c22b2b335be4caa50215796b8aa65c3f321d3de57
-
SHA512
405dc8fc5f13d0163f866a84da999f1f0db9242dc2b30e2876da4ae96aa70b0f7b30a5fc3075219e1f16fdb451e1fd1cc68aff64069548803481127e111baef9
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ElwC:bgGYcA/53GAA6y37Q68wC
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-