General
-
Target
2024-02-22_d701dbd24f3337095bfe2af33bbfc4e8_cryptolocker
-
Size
47KB
-
Sample
240222-krqnpsfe32
-
MD5
d701dbd24f3337095bfe2af33bbfc4e8
-
SHA1
8eeb61dfc88916b0098149c90ba530e23020239c
-
SHA256
8cb2b133e9c31e904dc8aafbfb3adf172da9d2e0879d233ec1b9fcd392454131
-
SHA512
ff71787058210c0b15c882224d4c86f0fbaf01b40c02d0d2eb171389eab1e9db67110fd38e6cbe49e1c0ca0f0fcac2929775e499c78eb394ad67c10306a0d2d6
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dm7:bgGYcA/53GAA6y37Q6dm7
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_d701dbd24f3337095bfe2af33bbfc4e8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_d701dbd24f3337095bfe2af33bbfc4e8_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_d701dbd24f3337095bfe2af33bbfc4e8_cryptolocker
-
Size
47KB
-
MD5
d701dbd24f3337095bfe2af33bbfc4e8
-
SHA1
8eeb61dfc88916b0098149c90ba530e23020239c
-
SHA256
8cb2b133e9c31e904dc8aafbfb3adf172da9d2e0879d233ec1b9fcd392454131
-
SHA512
ff71787058210c0b15c882224d4c86f0fbaf01b40c02d0d2eb171389eab1e9db67110fd38e6cbe49e1c0ca0f0fcac2929775e499c78eb394ad67c10306a0d2d6
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dm7:bgGYcA/53GAA6y37Q6dm7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-