General
-
Target
2024-02-21_a51b031b999a080a24e1aa2ce8636bab_cryptolocker
-
Size
34KB
-
Sample
240221-xd41dsdd9x
-
MD5
a51b031b999a080a24e1aa2ce8636bab
-
SHA1
953d97c4732501235824d1b4b63f7d47a1b1f161
-
SHA256
6a2652950fcdb6faea728e73a7a62abc0ef96b7b74f98a6727c4170d99fc62b2
-
SHA512
209f9e811d9614e56d91ed2999b833e7fa1e199bbb2b49e7f1795a16c6d6afeb5661f13685246e0a41e83be0feacc78c751f63463c8adfe51ae8e1f9ae60e057
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02lOQAz:b/yC4GyNM01GuQMNXw2PSjHC02ltAz
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_a51b031b999a080a24e1aa2ce8636bab_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_a51b031b999a080a24e1aa2ce8636bab_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_a51b031b999a080a24e1aa2ce8636bab_cryptolocker
-
Size
34KB
-
MD5
a51b031b999a080a24e1aa2ce8636bab
-
SHA1
953d97c4732501235824d1b4b63f7d47a1b1f161
-
SHA256
6a2652950fcdb6faea728e73a7a62abc0ef96b7b74f98a6727c4170d99fc62b2
-
SHA512
209f9e811d9614e56d91ed2999b833e7fa1e199bbb2b49e7f1795a16c6d6afeb5661f13685246e0a41e83be0feacc78c751f63463c8adfe51ae8e1f9ae60e057
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02lOQAz:b/yC4GyNM01GuQMNXw2PSjHC02ltAz
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-