General
-
Target
2024-02-23_463575f63d7e5d636d2c53a158104af7_cryptolocker
-
Size
386KB
-
Sample
240223-yczjysge9w
-
MD5
463575f63d7e5d636d2c53a158104af7
-
SHA1
b169c60f1c74e4de9935c9406829ce30bc70c368
-
SHA256
28118ff61ea113e50d6d9c9a3f8ac300f7fc70be1fb2e8c06a2cee9fffd22cac
-
SHA512
735fc06398b271af3aeb56fc1d5c8554ec8f5db2cd3e70aaaa02597469af26d7803c88793ebd72f81b0c8bd1648f4ea0372d2575bff3bce88c1f37004c1cabef
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXG:nnOflT/ZFIjBz3xjTxynGUOUhXG
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_463575f63d7e5d636d2c53a158104af7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_463575f63d7e5d636d2c53a158104af7_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_463575f63d7e5d636d2c53a158104af7_cryptolocker
-
Size
386KB
-
MD5
463575f63d7e5d636d2c53a158104af7
-
SHA1
b169c60f1c74e4de9935c9406829ce30bc70c368
-
SHA256
28118ff61ea113e50d6d9c9a3f8ac300f7fc70be1fb2e8c06a2cee9fffd22cac
-
SHA512
735fc06398b271af3aeb56fc1d5c8554ec8f5db2cd3e70aaaa02597469af26d7803c88793ebd72f81b0c8bd1648f4ea0372d2575bff3bce88c1f37004c1cabef
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXG:nnOflT/ZFIjBz3xjTxynGUOUhXG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-