General
-
Target
2024-02-23_e0438aef4b6598ccf9d3ae1dad2aa9c4_cryptolocker
-
Size
48KB
-
Sample
240223-zrwbhsgh98
-
MD5
e0438aef4b6598ccf9d3ae1dad2aa9c4
-
SHA1
0417d38e23e4de07c1c37c35cf9a612a6c8e6807
-
SHA256
bca739d4d68730b123edc3f1e5210e42b0a2b4ee972aceefdc3613f795a8d6d2
-
SHA512
6a58ac9461ec9e60d598647d41301ad91c5c04892c91c54f92803c321ea80b37e74a805591efc4025357edb3976abf534dde9a2c899668edf40262b9026851f3
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5wjvaHYwiqLRY/:btB9g/xtCSKfxLIc/E1aO
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_e0438aef4b6598ccf9d3ae1dad2aa9c4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_e0438aef4b6598ccf9d3ae1dad2aa9c4_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_e0438aef4b6598ccf9d3ae1dad2aa9c4_cryptolocker
-
Size
48KB
-
MD5
e0438aef4b6598ccf9d3ae1dad2aa9c4
-
SHA1
0417d38e23e4de07c1c37c35cf9a612a6c8e6807
-
SHA256
bca739d4d68730b123edc3f1e5210e42b0a2b4ee972aceefdc3613f795a8d6d2
-
SHA512
6a58ac9461ec9e60d598647d41301ad91c5c04892c91c54f92803c321ea80b37e74a805591efc4025357edb3976abf534dde9a2c899668edf40262b9026851f3
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5wjvaHYwiqLRY/:btB9g/xtCSKfxLIc/E1aO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-