General
-
Target
2024-02-23_84cfd212a30730bdd6f3dd83ba685b53_cryptolocker
-
Size
48KB
-
Sample
240223-yhkmzsfh29
-
MD5
84cfd212a30730bdd6f3dd83ba685b53
-
SHA1
144ee7999f9e197645ef72f5968c60854906e159
-
SHA256
8b35eb9b8c34ae09eeaf4831af5f31f94a7bc849899806ace950aa688657dc1b
-
SHA512
bd6a59d709870bad144f277a18d81a59b48d6f37a34b00716b3fcaa64aa833281dd20d28778cdebf99ee01e08ff8b0e85105f76fabe7fb48e70fa4f04233c66a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hS7e:bgGYcA/53GAA6y37nbS7e
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_84cfd212a30730bdd6f3dd83ba685b53_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_84cfd212a30730bdd6f3dd83ba685b53_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_84cfd212a30730bdd6f3dd83ba685b53_cryptolocker
-
Size
48KB
-
MD5
84cfd212a30730bdd6f3dd83ba685b53
-
SHA1
144ee7999f9e197645ef72f5968c60854906e159
-
SHA256
8b35eb9b8c34ae09eeaf4831af5f31f94a7bc849899806ace950aa688657dc1b
-
SHA512
bd6a59d709870bad144f277a18d81a59b48d6f37a34b00716b3fcaa64aa833281dd20d28778cdebf99ee01e08ff8b0e85105f76fabe7fb48e70fa4f04233c66a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hS7e:bgGYcA/53GAA6y37nbS7e
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-