General
-
Target
2024-02-22_07a0386a527c6dc1f2d6cbc0e90bbb3e_cryptolocker
-
Size
41KB
-
Sample
240222-fdshxscd24
-
MD5
07a0386a527c6dc1f2d6cbc0e90bbb3e
-
SHA1
b77ea92b7d0a0fff9ccfd7bc3c9efd2ce09de5ce
-
SHA256
3efd95a37cf1594f714dc750d6091b790c037df598e1388dddfe59d434a05bc1
-
SHA512
b6fac6d61bb53098e89cf2a78fbf294c6228a17c910fc227bca86b2fb4c98fffa8adf41f35d0fa276c0501a05b97d829e263d62c2b1e9f304d97e955596f67ec
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrex:bc/y2lkF0+BjrU
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_07a0386a527c6dc1f2d6cbc0e90bbb3e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_07a0386a527c6dc1f2d6cbc0e90bbb3e_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_07a0386a527c6dc1f2d6cbc0e90bbb3e_cryptolocker
-
Size
41KB
-
MD5
07a0386a527c6dc1f2d6cbc0e90bbb3e
-
SHA1
b77ea92b7d0a0fff9ccfd7bc3c9efd2ce09de5ce
-
SHA256
3efd95a37cf1594f714dc750d6091b790c037df598e1388dddfe59d434a05bc1
-
SHA512
b6fac6d61bb53098e89cf2a78fbf294c6228a17c910fc227bca86b2fb4c98fffa8adf41f35d0fa276c0501a05b97d829e263d62c2b1e9f304d97e955596f67ec
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrex:bc/y2lkF0+BjrU
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-