General
-
Target
2024-02-22_7331189f179bf45624e853f42159b67d_cryptolocker
-
Size
41KB
-
Sample
240222-v9mpwadb4t
-
MD5
7331189f179bf45624e853f42159b67d
-
SHA1
bcdc054787df8f2d744fd62943a3e861f4b7e795
-
SHA256
ac27aac6351d9d30b38cb6e0c020c8e1c59e145e0c149d2e0fc30f89c698d547
-
SHA512
cd7e486c7451a5a3642361388a6d6d0d4ffb4e356cdcf22bf887be536cc4c72e49f1380b744872dfef238997b8f9edb3f479f64b70058c8547da8864683fc39c
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAky:b/pYayGig5HjS3NPAP
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_7331189f179bf45624e853f42159b67d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_7331189f179bf45624e853f42159b67d_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_7331189f179bf45624e853f42159b67d_cryptolocker
-
Size
41KB
-
MD5
7331189f179bf45624e853f42159b67d
-
SHA1
bcdc054787df8f2d744fd62943a3e861f4b7e795
-
SHA256
ac27aac6351d9d30b38cb6e0c020c8e1c59e145e0c149d2e0fc30f89c698d547
-
SHA512
cd7e486c7451a5a3642361388a6d6d0d4ffb4e356cdcf22bf887be536cc4c72e49f1380b744872dfef238997b8f9edb3f479f64b70058c8547da8864683fc39c
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAky:b/pYayGig5HjS3NPAP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-