General
-
Target
2024-02-22_b2acb8960af423c0251208cf3300542c_cryptolocker
-
Size
135KB
-
Sample
240222-k32kcaff83
-
MD5
b2acb8960af423c0251208cf3300542c
-
SHA1
d38d2db024a1201494a1a60d0d080fe8894006f5
-
SHA256
45e5b35dcf1d7b7854f7dd7429ef32b44aeac9f16cef31246c488dfffdd158a7
-
SHA512
159b08761e109501a84eac0ade108cd8fde16343f26f876d091a8127e1aae57521f0c0ee2790ad8ab877edb76bca25fbe70f9afddb8969600be1df1020273df9
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgpwqWsviy6v:u6a++OtEvwDpj6zj
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_b2acb8960af423c0251208cf3300542c_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-22_b2acb8960af423c0251208cf3300542c_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_b2acb8960af423c0251208cf3300542c_cryptolocker
-
Size
135KB
-
MD5
b2acb8960af423c0251208cf3300542c
-
SHA1
d38d2db024a1201494a1a60d0d080fe8894006f5
-
SHA256
45e5b35dcf1d7b7854f7dd7429ef32b44aeac9f16cef31246c488dfffdd158a7
-
SHA512
159b08761e109501a84eac0ade108cd8fde16343f26f876d091a8127e1aae57521f0c0ee2790ad8ab877edb76bca25fbe70f9afddb8969600be1df1020273df9
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgpwqWsviy6v:u6a++OtEvwDpj6zj
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-