General
-
Target
2024-02-22_b545c14bf1b8d3ca18769d6bd5b8e506_cryptolocker
-
Size
35KB
-
Sample
240222-p7d23ahh84
-
MD5
b545c14bf1b8d3ca18769d6bd5b8e506
-
SHA1
b4cb11986bc1c7bcd4ccfb1a94ffd68930fc61b6
-
SHA256
78d1c6a75723b8b1ff62094f6153265a6e6fbf8a8c061ff36509923a55f5e5ed
-
SHA512
ef869bfe1fb8bc43cfe057c653ab566ff2060415bf536c005be366f391bb63a53ef65398c9caa558744c53d6cf91ae9ca1ef8816793bc0b1d9ed9b170fa750b7
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg183z:btB9g/WItCSsAGjX7e9Nd
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_b545c14bf1b8d3ca18769d6bd5b8e506_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_b545c14bf1b8d3ca18769d6bd5b8e506_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_b545c14bf1b8d3ca18769d6bd5b8e506_cryptolocker
-
Size
35KB
-
MD5
b545c14bf1b8d3ca18769d6bd5b8e506
-
SHA1
b4cb11986bc1c7bcd4ccfb1a94ffd68930fc61b6
-
SHA256
78d1c6a75723b8b1ff62094f6153265a6e6fbf8a8c061ff36509923a55f5e5ed
-
SHA512
ef869bfe1fb8bc43cfe057c653ab566ff2060415bf536c005be366f391bb63a53ef65398c9caa558744c53d6cf91ae9ca1ef8816793bc0b1d9ed9b170fa750b7
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg183z:btB9g/WItCSsAGjX7e9Nd
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-